Abnormal detection method and device for user access behavior

The invention discloses a user access behavior anomaly detection method and device, relates to the technical field of network information security, and can improve the efficiency of anomaly behavior detection. The method comprises the following steps: acquiring an initial access behavior sequence co...

Full description

Saved in:
Bibliographic Details
Main Authors YIN QIAN'AN, TAO JINGLONG, LIU SHENG, XIA YUMING, WANG QIFAN, YU XIANZHE, LIANG SHUYUN, ZHOU XIAOYONG, MA YING, WEI GUOFU
Format Patent
LanguageChinese
English
Published 01.03.2022
Subjects
CALCULATING
COMPUTING
COUNTING
ELECTRIC DIGITAL DATA PROCESSING
HANDLING RECORD CARRIERS
PHYSICS
PRESENTATION OF DATA
RECOGNITION OF DATA
RECORD CARRIERS
Online AccessGet full text

Cover

More Information
Summary:The invention discloses a user access behavior anomaly detection method and device, relates to the technical field of network information security, and can improve the efficiency of anomaly behavior detection. The method comprises the following steps: acquiring an initial access behavior sequence corresponding to a user identifier from user access behavior data of a web system; performing multi-order window grouping on the initial access behavior sequence to obtain a plurality of target access behavior combination sequences for representing different access behavior classification features; calculating a combination frequency distribution value corresponding to an associated access behavior combination according to the associated access behavior combination among the plurality of target access behavior combination sequences; and according to the combined frequency distribution value, using an anomaly detection algorithm to obtain a detection result of whether the user access behavior is abnormal or not. The m
Bibliography:Application Number: CN202111441750