Secure access method and device, storage medium and terminal equipment

Abstract

The invention provides a secure access method and device, a storage medium and terminal equipment, and the method comprises the steps: obtaining a user request which comprises request content, a request action and basic request information; determining a service risk requested by the user based on the request content and the request action; determining a basic attribute risk of the user request based on the basic request information; and determining a processing operation on the user request based on the business risk and the basic attribute risk. Compared with the prior art, the specific service scene and the basic information are integrated, and the service request risk is integrally judged. And moreover, the dependence of an enterprise on manual experience can be effectively reduced, and the method can be applied to different service scenes and has certain universality.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a method, device, storage medium and terminal equipment for secure access. Background technique [0002] With the development of Internet technology, various Internet-based services have penetrated into every aspect of people's lives. However, due to the evolution of more diverse and complex network service scenarios, providers of network services and enterprises receiving network services will face various security issues. From traditional basic security to application security, to today's business security, security issues have gradually moved from behind the scenes to the foreground, and are becoming more and more closely integrated with network services. Among them, basic security includes basic hardware configuration, equipment security, etc. Application security includes software vulnerabilities, WAF (WebApplication Firewall, website application-level intrusion ...

AI Technical Summary

Problems solved by technology

[0006] (3) Combined analysis of business data and device fingerprint data, this method can make some pre-judgments before business abnormalities occur, but the effect is limited

[0007] However, the above business security protection methods basically use a single form to make predictions, which is difficult to make judgments based on the actual situation, and errors may occur during the judgment process

Moreover, for solution (1), it needs to combine different scenarios with different technologies for protection, relying on human experience to analyze business logs, poor portability, poor reusability, and high labor costs

Images