Abnormality detection method, device and equipment and storage medium
The invention discloses an anomaly detection method and device, equipment and a storage medium, and relates to the technical field of network security. The method comprises the following steps: respectively pairing N normal traffic data in a normal traffic data set with target traffic to be detected...
Gespeichert in:
Hauptverfasser: | , , , , , , |
---|---|
Format: | Patent |
Sprache: | chi ; eng |
Schlagworte: | |
Online-Zugang: | Volltext bestellen |
Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
Zusammenfassung: | The invention discloses an anomaly detection method and device, equipment and a storage medium, and relates to the technical field of network security. The method comprises the following steps: respectively pairing N normal traffic data in a normal traffic data set with target traffic to be detected, and respectively pairing M abnormal traffic data in abnormal traffic data with the target traffic to obtain a traffic pair detection set; inputting the traffic pair detection set into an anomaly detection model to obtain an anomaly result score of the target traffic; wherein the anomaly detection model is trained based on a traffic pair training set constructed by a normal traffic data set and an abnormal traffic data set, and each training traffic pair in the traffic pair training set has a respective traffic pair anomaly score; and if the abnormal result score is greater than or equal to the score threshold, determining that the target traffic is abnormal traffic, so as to solve the limitation of abnormal detec |
---|