Abnormality detection method, device and equipment and storage medium

The invention discloses an anomaly detection method and device, equipment and a storage medium, and relates to the technical field of network security. The method comprises the following steps: respectively pairing N normal traffic data in a normal traffic data set with target traffic to be detected...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: GU DUJUAN, ZHENG KAIFA, LIU DAPENG, YIN PEIYU, OU SHUAI, WANG XINGKAI, YU RUI
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention discloses an anomaly detection method and device, equipment and a storage medium, and relates to the technical field of network security. The method comprises the following steps: respectively pairing N normal traffic data in a normal traffic data set with target traffic to be detected, and respectively pairing M abnormal traffic data in abnormal traffic data with the target traffic to obtain a traffic pair detection set; inputting the traffic pair detection set into an anomaly detection model to obtain an anomaly result score of the target traffic; wherein the anomaly detection model is trained based on a traffic pair training set constructed by a normal traffic data set and an abnormal traffic data set, and each training traffic pair in the traffic pair training set has a respective traffic pair anomaly score; and if the abnormal result score is greater than or equal to the score threshold, determining that the target traffic is abnormal traffic, so as to solve the limitation of abnormal detec