Method for detecting database risk, server and storage medium

Abstract

The invention discloses a method for detecting a database risk, a server and a storage medium. The method comprises the steps of obtaining a target access record of a target user; extracting multipletarget behavior characteristics from the target access record; calculating a target matching degree between each target behavior characteristic and a preset baseline behavior characteristic; determining a target behavior risk level corresponding to the target matching degree through a behavior estimation model, wherein the behavior estimation model is used for reflecting a corresponding relationship between the matching degree and the behavior risk level. Based on the preset baseline behavior characteristic, the method for detecting the database risk can detect external attacks and internal threats, also can detect variable attacks efficiently without updating the database repeatedly and in real time, avoids data leakage caused by risky behavior of internal personnel, can detect threatening access to the database more comprehensively, can protect the database more efficiently, improves the database risk detection efficiency and accuracy and improves the database security.

Description

technical field [0001] The invention relates to the technical field of wireless communication, in particular to a method for detecting database risks, a server and a storage medium. Background technique [0002] With the development of the Internet, more and more businesses have migrated to the Internet, and the security of the database has been paid more and more attention. At present, database security protection in the industry mainly uses signature databases for risk identification, but this traditional protection mechanism is based on collecting the characteristics of existing attack methods and forming a signature database, and then analyzing protocol requests based on the signature database. Do a match check. This detection mechanism based on feature matching has the following defects: [0003] 1. Relying on feature updates, there are many misjudgments and even failures. The way of attack constantly mutates into new types, leading to the failure of protection. Usu...

AI Technical Summary

Problems solved by technology

[0007] The main purpose of the present invention is to detect the risky access to the database by calculating the target matching degree between each target behavior feature and the preset baseline behavior feature, so as to solve the problem of misjudgment in the prior art that relies on feature recognition and cannot cope with mutation attacks method, unable to deal with the failure of protection caused by untimely database updates, and unable to deal with the technical problems of data leakage caused by risky behaviors of internal personnel

Images