Data stealing detection method, system and equipment based on log causal traceability

The invention discloses a data stealing detection method, system and device based on log causal traceability, mainly relates to the technical field of data stealing detection, and is used for solving the problems that an existing data stealing detection method is lack of causal semantics, low in detection accuracy and the like. Comprising the steps of obtaining a preprocessed log through a terminal unified log platform; abstracting the preprocessing log into an initial dependency graph through a calculation engine; wherein the dependency graph comprises an operation relation; determining a priority score corresponding to each operation relationship based on the overall relationship ratio and the entity node ratio corresponding to the operation relationship; obtaining a final dependency graph; obtaining an implicit behavior sequence corresponding to the final dependency graph; and comparing the implicit behavior sequence with an implicit behavior call chain corresponding to a preset data stealing behavior to d