Abnormal access behavior detection method and device, storage medium and electronic equipment
The invention discloses an abnormal access behavior detection method and device, a storage medium and electronic equipment. The method comprises the following steps: acquiring a plurality of access logs in a network server, and acquiring an access path in each access log and a path reference source...
Gespeichert in:
Hauptverfasser: | , , , |
---|---|
Format: | Patent |
Sprache: | chi ; eng |
Schlagworte: | |
Online-Zugang: | Volltext bestellen |
Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
Zusammenfassung: | The invention discloses an abnormal access behavior detection method and device, a storage medium and electronic equipment. The method comprises the following steps: acquiring a plurality of access logs in a network server, and acquiring an access path in each access log and a path reference source of the access path; generating a directed graph of the access paths of the network server according to each access path and the path reference source; selecting candidate nodes from the directed graph according to the node connection number of each node to obtain a plurality of candidate nodes, and generating a target matrix according to node information of each candidate node; and determining an abnormal node from the plurality of candidate nodes through the target matrix, determining an access path corresponding to the abnormal node as an abnormal access path, and determining an access behavior corresponding to the abnormal access path as an abnormal access behavior. Through the method and the device, the problem |
---|