Method and apparatus for processing character string, and computer-readable storage medium

Abstract

The invention provides a method for processing a character string. The method comprises: a plurality of first valid character strings are received in a first time interval; for at least two of the plurality of first valid character strings, at least two character string models corresponding to each of the at least two first valid character strings are determined; a string model belonging to a regular character string model in the at least two character string models is determined; and model aggregation is carried out on the string model belonging to the regular character string model in the atleast two character string models to obtain an aggregated character string model set. With the method provided by the invention, the efficiency is improved; and avoidance is prevented and thus an undisclosed attack can be found.

Description

technical field [0001] Embodiments of the present invention relate to network security, and in particular to a method, device and computer-readable storage medium for processing character strings. Background technique [0002] Existing IDS (Intrusion Detection Systems, intrusion detection system), IPS (Intrusion Prevention System, intrusion prevention system), WAF (Web Application Firewall, website application-level intrusion prevention system) products are often established through rule detection or supervised learning However, these methods have the following problems: through coding and other methods, the rules may be bypassed; they are helpless in the face of undisclosed security attacks; in the face of large traffic requests, the performance is easy A bottleneck occurs. Contents of the invention [0003] In view of the above problems and other potential technical problems, one aspect of the embodiments of the present invention provides a method for processing charact...

AI Technical Summary

Problems solved by technology

[0002] Existing IDS (Intrusion Detection Systems, intrusion detection system), IPS (Intrusion Prevention System, intrusion prevention system), WAF (Web Application Firewall, website application-level intrusion prevention system) products are often established through rule detection or supervised learning However, these methods have the following problems: through coding and other methods, the rules may be bypassed; they are helpless in the face of undisclosed security attacks; in the face of large traffic requests, the performance is easy bottleneck

Images