Data processing method and device

Abstract

The embodiment of the invention discloses a data processing method and device, and the method comprises the steps: obtaining all sessions between a target protection object and a plurality of communication objects when detecting that the target protection object is in an attacked state; obtaining a message set associated with all sessions, and determining session characteristic parameters of eachsession according to the message set; inputting the session characteristic parameters of each session into an identification model, and determining a session type of each session based on the identification model; determining a communication object type of each communication object in the plurality of communication objects according to the session type of each session; and determining the communication object of the illegal type as an illegal communication object, adding the illegal communication object to the blacklist, and discarding the session corresponding to the illegal communication object. By adopting the embodiment of the invention, the security of the communication information can be improved, so that the stability of a communication system is ensured, and meanwhile, the type range of the protected client can be expanded.

Description

technical field [0001] The present invention relates to the technical field of data processing, in particular to a data processing method and device. Background technique [0002] With the continuous development of computer technology, communication through computer network has become the most mainstream communication method. However, in the process of communication, the security of communication information is also greatly threatened. Therefore, the communication system The security protection capability puts forward higher requirements. [0003] In the prior art, if you want to filter the communication information, you need to modify the code of the client so that the information sent by the client carries a specific watermark field, and then combine the protection end to intercept the bad information carrying the illegal watermark field to achieve The purpose of protecting the communication system, but the technology based on the watermark field will increase the redunda...

AI Technical Summary

Problems solved by technology

[0002] With the continuous development of computer technology, communication through computer network has become the most mainstream communication method. However, in the process of communication, the security of communication information is also greatly threatened. Therefore, the communication system Security protection capabilities put forward higher requirements

[0003] In the prior art, if you want to filter the communication information, you need to modify the code of the client so that the information sent by the client carries a specific watermark field, and then combine the protection end to intercept the bad information carrying the illegal watermark field to achieve The purpose of protecting the communication system, but the technology based on the watermark field will increase the redundancy of the information sent by the client, which will increase the upstream traffic of the client and reduce the communication efficiency; and because the client needs to be modified, it can have Protection effect, so it also increases the limitation of the protection range

Images