Method and device for detecting abnormal user

A technology for detecting anomalies and users, applied in the Internet field, it can solve problems such as error blocking, reduction of strategy accuracy and recall rate, and deterioration of strategy effectiveness, so as to increase adaptability, reduce the influence of subjective factors, and reduce workload. Effect
CN107888602AInactive Publication Date: 2018-04-06BEIJING BAISHANCLOUD TECH CO LTD
3 Cites 13 Cited by

Patent Information

Authority / Receiving Office
CN Β· China
Patent Type
Applications(China)
Current Assignee / Owner
BEIJING BAISHANCLOUD TECH CO LTD
Publication Date
2018-04-06
Estimated Expiration
Not applicable Β· inactive patent

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
Patent Text Reader

Abstract

The invention discloses a method and device for detecting an abnormal user. The method comprises the steps that logs are acquired; the acquired logs are classified; the various classes are scored according to access parameters in the various classes, the classes with the scores ranking the first N are selected, and the logs in the N classes are taken as key logs; and group characteristics of the key logs are extracted according to a characteristic extraction algorithm, individual characteristics of a log of a target user are extracted according to the characteristic extraction algorithm, and whether or not the target user is an abnormal user is judged according to the similarity of the group characteristics and the individual characteristics. The device is independent of a real-time strategy system, has a longer time window and can obtain more accurate characteristics of the user.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention relates to the technical field of the Internet, in particular to a method and device for detecting abnormal users. Background technique

[0002] Existing network security products generally use several rules or strategies to describe the user's behavior boundaries, and if a certain feature of the user breaks through the threshold of normal users, it will trigger a processing action.

[0003] In the rule-based network security protection scheme, the parameters such as the threshold value and algorithm of the rules are very dependent on the experience of the rule maker and are relatively fixed. After the configuration is completed, it cannot be adapted to changes in business development and website structure and functions.

[0004] There are following shortcoming in prior art:

[0005] 1. It is necessary to understand the structure and functions of the customer site in advance.

[0006] 2. Customize security policies for different interfa...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More