Identification method, server and terminal for webpage operation behavior

Abstract

The application provides an identification method, server and terminal for a webpage operation behavior. The identification method for the webpage operation behavior comprises the following steps: obtaining webpage operation behavior data to be processed; obtaining one or more class clusters corresponding to the webpage operation behavior data to be processed from the historical webpage operationbehavior information database pre-classified the class clusters based on the predetermined acquisition rules, wherein each of the class clusters in the historical webpage operation behavior information database is obtained by aggregating a plurality pieces of historical webpage operation behavior information based on predetermined clustering rules; and identifying whether the webpage operation behavior to be processed is a malicious operation behavior or not based on the pre-calculated aggregation degree of the corresponding one or more class clusters. According to the identification method, server and terminal for the webpage operation behavior, whether the webpage operation behavior is a malicious operation behavior or not can be effectively identified.

Description

technical field [0001] The present application relates to the field of information processing, and in particular to an identification method for web page operation behavior, a server, and a terminal. Background technique [0002] For websites in the Internet field, it is common that in order to stimulate user growth, the website will promote the number of user registrations on the website by issuing electronic vouchers to new registered users. Under normal circumstances, each user completes the registration through a series of operations such as inputting and clicking on the registration page. However, in order to seek illegitimate interests in a short period of time, individual users adopt malicious webpage operation behaviors, such as designing programs to automatically and quickly complete the registration of batch accounts, thereby avoiding the real operation of registering by manually entering real registration information again and again Behavior, this kind of high-fr...

AI Technical Summary

Problems solved by technology

It can be seen from this that the confrontational front-end technology can easily lead to an upgrade of offense and defense, and it is necessary to continuously establish new rules to fight against

[0005] Among them, the identification technology based on case-driven rules mainly has the disadvantage of lag. For example, if a website finds that a certain IP address has a large number of abnormal access requests through a large number of cases that have occurred, it will blacklist the IP address. , to prevent the IP address from continuing to perform abnormal access

However, there is no way to trace back the abnormal access requests before the IP address was blacklisted

Images