Method and device for detecting calling abnormity of application program interface

The invention discloses a calling anomaly detection method and device for an application program interface. The method comprises the following steps: acquiring an application program interface (API) calling sequence; dividing the API calling sequence into a plurality of sub-calling sequences; for ea...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: XUE WENZHE, BIAN KAI, YU YANLIN, ZHOU JINJIA, FU YISHENG, ZU LIJUN, DU BIAO, CHEN SIWEN, DONG TAO, ZHAO XIAOXIA, WANG WENBAI, ZHAO HAI, FANG YULUN, TANG YANG, ZHANG CHI
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
container_end_page
container_issue
container_start_page
container_title
container_volume
creator XUE WENZHE
BIAN KAI
YU YANLIN
ZHOU JINJIA
FU YISHENG
ZU LIJUN
DU BIAO
CHEN SIWEN
DONG TAO
ZHAO XIAOXIA
WANG WENBAI
ZHAO HAI
FANG YULUN
TANG YANG
ZHANG CHI
description The invention discloses a calling anomaly detection method and device for an application program interface. The method comprises the following steps: acquiring an application program interface (API) calling sequence; dividing the API calling sequence into a plurality of sub-calling sequences; for each sub-call sequence, predicting the next API called after the sub-call sequence to obtain m first predicted APIs, m being a positive integer; under the condition that the m first prediction APIs do not include the target API, it is determined that the API calling sequence is abnormal, and the target API is the next API after the sub-calling sequence. According to the calling anomaly detection method for the application program interface, the comprehensiveness of API calling anomaly detection can be guaranteed, and then the business risk can be reduced. 本申请公开了一种应用程序接口的调用异常检测方法和装置。其中,该方法包括:获取应用程序接口API调用序列;将API调用序列划分为多个子调用序列;针对每个子调用序列,对子调用序列之后调用的下一个API进行预测,得到m个第一预测API,m为正整数;在m个第一预测API中不包括目标API的情况下,确定API调用序列异常,目标API为子
format Patent
fullrecord <record><control><sourceid>epo_EVB</sourceid><recordid>TN_cdi_epo_espacenet_CN117493122A</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><sourcerecordid>CN117493122A</sourcerecordid><originalsourceid>FETCH-epo_espacenet_CN117493122A3</originalsourceid><addsrcrecordid>eNqNyjEKwkAQQNE0FqLeYTyAxSaCWEpQbLQQ-zDuzsaBzcyyGQRvbwQPYPV-8efV7UL21AAoAQK92BNELVMaeWPpwWNKX_EhWga2N2gEzDmxR2MVyEX7ggOwGJWInpbVLGIaafVzUa1Px3t73lDWjsY8LULWtVfndtt94-r60PzzfAAcCjg4</addsrcrecordid><sourcetype>Open Access Repository</sourcetype><iscdi>true</iscdi><recordtype>patent</recordtype></control><display><type>patent</type><title>Method and device for detecting calling abnormity of application program interface</title><source>esp@cenet</source><creator>XUE WENZHE ; BIAN KAI ; YU YANLIN ; ZHOU JINJIA ; FU YISHENG ; ZU LIJUN ; DU BIAO ; CHEN SIWEN ; DONG TAO ; ZHAO XIAOXIA ; WANG WENBAI ; ZHAO HAI ; FANG YULUN ; TANG YANG ; ZHANG CHI</creator><creatorcontrib>XUE WENZHE ; BIAN KAI ; YU YANLIN ; ZHOU JINJIA ; FU YISHENG ; ZU LIJUN ; DU BIAO ; CHEN SIWEN ; DONG TAO ; ZHAO XIAOXIA ; WANG WENBAI ; ZHAO HAI ; FANG YULUN ; TANG YANG ; ZHANG CHI</creatorcontrib><description>The invention discloses a calling anomaly detection method and device for an application program interface. The method comprises the following steps: acquiring an application program interface (API) calling sequence; dividing the API calling sequence into a plurality of sub-calling sequences; for each sub-call sequence, predicting the next API called after the sub-call sequence to obtain m first predicted APIs, m being a positive integer; under the condition that the m first prediction APIs do not include the target API, it is determined that the API calling sequence is abnormal, and the target API is the next API after the sub-calling sequence. According to the calling anomaly detection method for the application program interface, the comprehensiveness of API calling anomaly detection can be guaranteed, and then the business risk can be reduced. 本申请公开了一种应用程序接口的调用异常检测方法和装置。其中,该方法包括:获取应用程序接口API调用序列;将API调用序列划分为多个子调用序列;针对每个子调用序列,对子调用序列之后调用的下一个API进行预测,得到m个第一预测API,m为正整数;在m个第一预测API中不包括目标API的情况下,确定API调用序列异常,目标API为子</description><language>chi ; eng</language><subject>CALCULATING ; COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS ; COMPUTING ; COUNTING ; ELECTRIC DIGITAL DATA PROCESSING ; PHYSICS</subject><creationdate>2024</creationdate><oa>free_for_read</oa><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&amp;date=20240202&amp;DB=EPODOC&amp;CC=CN&amp;NR=117493122A$$EHTML$$P50$$Gepo$$Hfree_for_read</linktohtml><link.rule.ids>230,308,780,885,25564,76547</link.rule.ids><linktorsrc>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&amp;date=20240202&amp;DB=EPODOC&amp;CC=CN&amp;NR=117493122A$$EView_record_in_European_Patent_Office$$FView_record_in_$$GEuropean_Patent_Office$$Hfree_for_read</linktorsrc></links><search><creatorcontrib>XUE WENZHE</creatorcontrib><creatorcontrib>BIAN KAI</creatorcontrib><creatorcontrib>YU YANLIN</creatorcontrib><creatorcontrib>ZHOU JINJIA</creatorcontrib><creatorcontrib>FU YISHENG</creatorcontrib><creatorcontrib>ZU LIJUN</creatorcontrib><creatorcontrib>DU BIAO</creatorcontrib><creatorcontrib>CHEN SIWEN</creatorcontrib><creatorcontrib>DONG TAO</creatorcontrib><creatorcontrib>ZHAO XIAOXIA</creatorcontrib><creatorcontrib>WANG WENBAI</creatorcontrib><creatorcontrib>ZHAO HAI</creatorcontrib><creatorcontrib>FANG YULUN</creatorcontrib><creatorcontrib>TANG YANG</creatorcontrib><creatorcontrib>ZHANG CHI</creatorcontrib><title>Method and device for detecting calling abnormity of application program interface</title><description>The invention discloses a calling anomaly detection method and device for an application program interface. The method comprises the following steps: acquiring an application program interface (API) calling sequence; dividing the API calling sequence into a plurality of sub-calling sequences; for each sub-call sequence, predicting the next API called after the sub-call sequence to obtain m first predicted APIs, m being a positive integer; under the condition that the m first prediction APIs do not include the target API, it is determined that the API calling sequence is abnormal, and the target API is the next API after the sub-calling sequence. According to the calling anomaly detection method for the application program interface, the comprehensiveness of API calling anomaly detection can be guaranteed, and then the business risk can be reduced. 本申请公开了一种应用程序接口的调用异常检测方法和装置。其中,该方法包括:获取应用程序接口API调用序列;将API调用序列划分为多个子调用序列;针对每个子调用序列,对子调用序列之后调用的下一个API进行预测,得到m个第一预测API,m为正整数;在m个第一预测API中不包括目标API的情况下,确定API调用序列异常,目标API为子</description><subject>CALCULATING</subject><subject>COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS</subject><subject>COMPUTING</subject><subject>COUNTING</subject><subject>ELECTRIC DIGITAL DATA PROCESSING</subject><subject>PHYSICS</subject><fulltext>true</fulltext><rsrctype>patent</rsrctype><creationdate>2024</creationdate><recordtype>patent</recordtype><sourceid>EVB</sourceid><recordid>eNqNyjEKwkAQQNE0FqLeYTyAxSaCWEpQbLQQ-zDuzsaBzcyyGQRvbwQPYPV-8efV7UL21AAoAQK92BNELVMaeWPpwWNKX_EhWga2N2gEzDmxR2MVyEX7ggOwGJWInpbVLGIaafVzUa1Px3t73lDWjsY8LULWtVfndtt94-r60PzzfAAcCjg4</recordid><startdate>20240202</startdate><enddate>20240202</enddate><creator>XUE WENZHE</creator><creator>BIAN KAI</creator><creator>YU YANLIN</creator><creator>ZHOU JINJIA</creator><creator>FU YISHENG</creator><creator>ZU LIJUN</creator><creator>DU BIAO</creator><creator>CHEN SIWEN</creator><creator>DONG TAO</creator><creator>ZHAO XIAOXIA</creator><creator>WANG WENBAI</creator><creator>ZHAO HAI</creator><creator>FANG YULUN</creator><creator>TANG YANG</creator><creator>ZHANG CHI</creator><scope>EVB</scope></search><sort><creationdate>20240202</creationdate><title>Method and device for detecting calling abnormity of application program interface</title><author>XUE WENZHE ; BIAN KAI ; YU YANLIN ; ZHOU JINJIA ; FU YISHENG ; ZU LIJUN ; DU BIAO ; CHEN SIWEN ; DONG TAO ; ZHAO XIAOXIA ; WANG WENBAI ; ZHAO HAI ; FANG YULUN ; TANG YANG ; ZHANG CHI</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-epo_espacenet_CN117493122A3</frbrgroupid><rsrctype>patents</rsrctype><prefilter>patents</prefilter><language>chi ; eng</language><creationdate>2024</creationdate><topic>CALCULATING</topic><topic>COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS</topic><topic>COMPUTING</topic><topic>COUNTING</topic><topic>ELECTRIC DIGITAL DATA PROCESSING</topic><topic>PHYSICS</topic><toplevel>online_resources</toplevel><creatorcontrib>XUE WENZHE</creatorcontrib><creatorcontrib>BIAN KAI</creatorcontrib><creatorcontrib>YU YANLIN</creatorcontrib><creatorcontrib>ZHOU JINJIA</creatorcontrib><creatorcontrib>FU YISHENG</creatorcontrib><creatorcontrib>ZU LIJUN</creatorcontrib><creatorcontrib>DU BIAO</creatorcontrib><creatorcontrib>CHEN SIWEN</creatorcontrib><creatorcontrib>DONG TAO</creatorcontrib><creatorcontrib>ZHAO XIAOXIA</creatorcontrib><creatorcontrib>WANG WENBAI</creatorcontrib><creatorcontrib>ZHAO HAI</creatorcontrib><creatorcontrib>FANG YULUN</creatorcontrib><creatorcontrib>TANG YANG</creatorcontrib><creatorcontrib>ZHANG CHI</creatorcontrib><collection>esp@cenet</collection></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext_linktorsrc</fulltext></delivery><addata><au>XUE WENZHE</au><au>BIAN KAI</au><au>YU YANLIN</au><au>ZHOU JINJIA</au><au>FU YISHENG</au><au>ZU LIJUN</au><au>DU BIAO</au><au>CHEN SIWEN</au><au>DONG TAO</au><au>ZHAO XIAOXIA</au><au>WANG WENBAI</au><au>ZHAO HAI</au><au>FANG YULUN</au><au>TANG YANG</au><au>ZHANG CHI</au><format>patent</format><genre>patent</genre><ristype>GEN</ristype><title>Method and device for detecting calling abnormity of application program interface</title><date>2024-02-02</date><risdate>2024</risdate><abstract>The invention discloses a calling anomaly detection method and device for an application program interface. The method comprises the following steps: acquiring an application program interface (API) calling sequence; dividing the API calling sequence into a plurality of sub-calling sequences; for each sub-call sequence, predicting the next API called after the sub-call sequence to obtain m first predicted APIs, m being a positive integer; under the condition that the m first prediction APIs do not include the target API, it is determined that the API calling sequence is abnormal, and the target API is the next API after the sub-calling sequence. According to the calling anomaly detection method for the application program interface, the comprehensiveness of API calling anomaly detection can be guaranteed, and then the business risk can be reduced. 本申请公开了一种应用程序接口的调用异常检测方法和装置。其中,该方法包括:获取应用程序接口API调用序列;将API调用序列划分为多个子调用序列;针对每个子调用序列,对子调用序列之后调用的下一个API进行预测,得到m个第一预测API,m为正整数;在m个第一预测API中不包括目标API的情况下,确定API调用序列异常,目标API为子</abstract><oa>free_for_read</oa></addata></record>
fulltext fulltext_linktorsrc
identifier
ispartof
issn
language chi ; eng
recordid cdi_epo_espacenet_CN117493122A
source esp@cenet
subjects CALCULATING
COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS
COMPUTING
COUNTING
ELECTRIC DIGITAL DATA PROCESSING
PHYSICS
title Method and device for detecting calling abnormity of application program interface
url https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2024-12-26T00%3A01%3A55IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-epo_EVB&rft_val_fmt=info:ofi/fmt:kev:mtx:patent&rft.genre=patent&rft.au=XUE%20WENZHE&rft.date=2024-02-02&rft_id=info:doi/&rft_dat=%3Cepo_EVB%3ECN117493122A%3C/epo_EVB%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_id=info:pmid/&rfr_iscdi=true