Risk identification method and equipment, storage medium and electronic equipment

Abstract

The embodiment of the invention discloses a risk identification method and equipment, a storage medium and electronic equipment. The method includes the following steps that an operation behavior chain triggered aiming at a terminal application is acquired, wherein the operation behavior chain comprises multiple operation behaviors arranged according to the operation time sequence; a target operation behavior set matched with all risk behaviors in a risk behavior set is acquired from the operation behaviors; a target operation behavior chain corresponding to the target operation behavior set is acquired, when a target risk behavior chain matched with the target operation behavior chain exists in the risk behavior chain set, it is determined that an attack risk exists in the terminal application, and risk attack prompt information aiming at the terminal application is output. By the adoption of the risk identification method and equipment, the storage medium and the electronic equipment, hostile attack behaviors aiming at the terminal application can be accurately sensed and identified without being limited by detection environments, and the use security of the terminal applicationis fundamentally guaranteed.

Description

technical field [0001] The present invention relates to the technical field of the Internet, in particular to a risk identification method and its equipment, storage medium, and electronic equipment. Background technique [0002] As the scale of the network expands, the functions of the network system comprehensively cover all aspects of life, such as social interaction, communication and entertainment, etc., and the complexity of the network structure increases significantly. While the complex network structure and rich functions provide users with better services, it also expands the attack surface of terminals using the network, making terminals more vulnerable to attacks. [0003] In the face of various attack behaviors of terminal applications, antivirus engines are generally used to detect malicious attacks, and terminal applications are protected by building security boundaries. However, some viruses will not trigger malicious attacks in the antivirus engine environm...

AI Technical Summary

Problems solved by technology

However, some viruses will not trigger malicious attacks in the antivirus engine env

Images