Risk prevention and control method and device and electronic device

Abstract

The embodiment of the invention provides a risk prevention and control method and device and an electronic device, and is applied to the technical field of information security. The method includes the steps of obtaining abnormal behavior data in a service log, adding abnormal behavior features in the abnormal behavior data to a cache database and a feature database, extracting blacklist data meeting a feature splicing rule in the service log, adding the extracted blacklist data to the cache database, adding black labels in the abnormal behavior features to a black label database, combining historical behavior features extracted from the black label database and stable behavior features extracted from the feature database, adding the combined feature information to the feature splicing rule, judging whether a current to-be-prevented/controlled service request meets the abnormal behavior features or the blacklist data or the feature spliced rule, if yes, determining that a risk exists in the current to-be-prevented/controlled service request, and intercepting the current to-be-prevented/controlled service request. The real-time property of risk detection can be improved.

Description

technical field [0001] The present invention relates to the technical field of information security, in particular to a risk prevention and control method, device and electronic equipment. Background technique [0002] In the field of information security technology, risk assessment and control are eternal themes, and various Internet companies have established large or small risk control teams to deal with the increasingly severe security situation. In this process, risk control will face dozens or even hundreds of different business risk points. How to evaluate risks more commonly and comprehensively has become the core appeal of all risk control systems. [0003] Existing risk prevention and control methods mainly extract risk data or features offline, and then feed them back to online rules to achieve joint prevention and control of business. However, this method has problems such as poor real-time performance, and illegal products are easy to bypass the rules; among th...

AI Technical Summary

Problems solved by technology

However, this method has problems such as poor real-time performance, and illegal products are easy to bypass the rules; among them, black products refer to an industry that uses viruses and Trojan horses to obtain benefits

In addition, the black production groups faced by each risky business may be different, so the risk data of each business needs to be shared offline, lacking the continuity of time series behavior

It can be seen that the real-time performance of the existing risk prevention and control methods for detecting risks is relatively low, which leads to problems such as risks being easily bypassed and unable to prevent and control risks in a timely manner.

Images