Method and device for automatically detecting illegal data modification behavior

Abstract

The invention discloses a method and device for automatically detecting an illegal data modification behavior. The method comprises the steps of extracting database operation information from a business system database and generating a detection database; carrying out illegal modification behavior detection on to-be-detected data in the detection database according to a preset detection rule; and marking the data suspected to be illegally modified and further generating information of informing a manager. According to the detection method, the legality of the data modification behavior can be accurately and efficiently identified and pre-warned by combining the detection rule stored in the detection database and data access connection information on the basis of a logic relationship in the business system database.

Description

technical field [0001] The invention belongs to the technical field of computers, and in particular relates to an automatic detection method and device for illegal data modification behavior. Background technique [0002] Data security is crucial to the operation of business systems. The database is not only the basis for the operation of the business system, but also an important asset of the enterprise and the management department. Therefore, it is very important to maintain the security of the database and ensure the integrity and logical consistency of the data. However, driven by interests, there may be behaviors of concealing or falsifying data by illegally modifying business data. Illegal modification of database data may cause damage to the logical integrity and consistency of system data, leading to errors in system operation or output of wrong decision-making information, resulting in information deviation and information asymmetry, and ultimately the guidance and...

AI Technical Summary

Problems solved by technology

[0004] The implementation of security measures in advance cannot completely rule out illegal operations. There are two main reasons: the system design itself is difficult to achieve zero defects, and the system may have various loopholes in the programming implementation process; there is no defense against directly modifying the database through the client ability

Although post-event data audits can capture all data changes and provide early warnings for certain specific behaviors, this method is mainly aimed at the data itself and does not consider the logic of business data and data operation behavior. Therefore, for error logic and illegal operations Poor identification of pathways

Images