The invention relates to a method, a
system, equipment and a medium for obtaining a data flow link, and the method comprises the steps: obtaining a business flow
link diagram and a deployment architecture diagram, confirming a micro-service tangency point of a business application, deploying a data collection probe in the form of an SDK
assembly, and obtaining
business data flow information; labeling a link
label for a service operation corresponding to the service data flow information, and obtaining a data flow path by taking a service account as a dimension; creating a
business domain knowledge base and a behavior judgment model; establishing a business behavior portrait, recognizing an abnormal operation by using the behavior judgment model and a preset illegal
behavior recognition strategy, comparing the abnormal operation with the business behavior portrait corresponding to the business account, and performing
risk assessment and early warning according to a comparison result; according to the method, multi-dimensional tangency
point data acquisition is realized, a data flow link is completely restored and presented, abnormal events, illegal operation and other risks in a
data processing flow are identified, early warning and management and control measures are effectively executed, and the security and compliance of data flow are improved.