Information object detection method and system

Abstract

The embodiment of the invention provides an information object detection method and system. The method comprises the following steps that the information of a to-be-detected object is received by detection equipment, and the label of the to-be-detected object is carried by the information of the to-be-detected object; a credit value database is searched by the detection equipment according to the label of the to-be-detected object so as to obtain a credit value of the to-be-detected object; the credit value of the to-be-detected object is obtained through the comprehensive evaluation of the influence factors of the to-be-detected object in a specific time, and the influence factors refer to the behavior or the state of the to-be-detected object, which influences the security of the to-be-detected object; and the credit value of the to-be-detected object is compared with at least one preset credit value range by the detection equipment so as to obtain the first credit value range to which the credit value of the to-be-detected object belongs, and security detection is carried out on the information of the to-be-detected object according to a detection strategy corresponding to the first credit value range. Due to the adoption of the technical scheme, the detection performance can be improved and false judgment and leaked judgment probability can be lowered.

Description

technical field [0001] The invention relates to the field of network security, in particular to an information object detection method and system. Background technique [0002] In the existing intrusion prevention, access control, attack protection, anti-spam and other systems, the detection of abnormal information traffic is mostly judged based on malicious characteristics. The detection method based on malicious features is to convert malicious features into judgment rules. When the detected information passes through the detection device, the detection device performs protocol decoding on the information, and then compares it with the pre-stored judgment rules to determine whether the detected information is abnormal. . [0003] The traditional feature-based detection method does not refer to the historical behavior of the detected object, but only judges it based on the current behavior in isolation. In the big data environment, there are performance bottlenecks, and th...

AI Technical Summary

Problems solved by technology

[0003] The traditional feature-based detection method does not refer to the historical behavior of the detected object, and only judges it based on the current behavior in isolation. In the big data environment, there are performance bottlenecks, and the probability of misjudgment and missed judgment is high.

Images