Method and device for detecting calling abnormity of application program interface

The invention discloses a calling anomaly detection method and device for an application program interface. The method comprises the following steps: acquiring an application program interface (API) calling sequence; dividing the API calling sequence into a plurality of sub-calling sequences; for ea...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: XUE WENZHE, BIAN KAI, YU YANLIN, ZHOU JINJIA, FU YISHENG, ZU LIJUN, DU BIAO, CHEN SIWEN, DONG TAO, ZHAO XIAOXIA, WANG WENBAI, ZHAO HAI, FANG YULUN, TANG YANG, ZHANG CHI
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention discloses a calling anomaly detection method and device for an application program interface. The method comprises the following steps: acquiring an application program interface (API) calling sequence; dividing the API calling sequence into a plurality of sub-calling sequences; for each sub-call sequence, predicting the next API called after the sub-call sequence to obtain m first predicted APIs, m being a positive integer; under the condition that the m first prediction APIs do not include the target API, it is determined that the API calling sequence is abnormal, and the target API is the next API after the sub-calling sequence. According to the calling anomaly detection method for the application program interface, the comprehensiveness of API calling anomaly detection can be guaranteed, and then the business risk can be reduced. 本申请公开了一种应用程序接口的调用异常检测方法和装置。其中,该方法包括:获取应用程序接口API调用序列;将API调用序列划分为多个子调用序列;针对每个子调用序列,对子调用序列之后调用的下一个API进行预测,得到m个第一预测API,m为正整数;在m个第一预测API中不包括目标API的情况下,确定API调用序列异常,目标API为子