A kind of online file illegal download detection method and device
A file download and online file technology, applied in the computer field, to achieve the effect of saving human resources and reducing the rate of false positives
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0062] like figure 1 As shown, a method for detecting illegal online file download of the present invention, the processing flow includes the following steps:
[0063] Step 1, obtain the target server file download log and extract features to represent the user's file download behavior;
[0064] Step 2, based on the clustering algorithm combined with statistical analysis to obtain the user download behavior baseline;
[0065] Step 3: Check the legitimacy of the user's downloading behavior according to the user's downloading behavior baseline.
[0066] In the embodiment of the present invention, the file download log of the target server is obtained and features are extracted to characterize the user's file download behavior, and the user's download behavior baseline is obtained based on a clustering algorithm combined with statistical analysis, and the legitimacy of the user's download behavior is determined according to the user download behavior baseline In this way, when th...
Embodiment 2
[0068] The invention discloses a method for detecting illegal downloading of online files, and the executing body of the method is a server. Wherein, the server may be a background server with a detection function.
[0069] The following will combine specific implementation methods, figure 1 The processing flow shown is described in detail, and the content can be as follows:
[0070] Step 101, acquire the file download log of the target server and extract features to characterize the user's file download behavior.
[0071] In implementation, the system log is used as a data source to receive all logs related to file download. Extract log features, and the feature vector is expressed as: c i →(c i,1 ,c i,2 ), where each dimension of the vector represents the file download time and file size respectively.
[0072] In step 102, a user's download behavior baseline is obtained based on a clustering algorithm combined with statistical analysis.
[0073] In the implementation,...
Embodiment 3
[0096] Based on the same technical idea, the present invention also provides a device for detecting illegal download of online files, such as figure 2 As shown, the device includes:
[0097] The data processing module 201 is used to obtain the target server file download log and extract features to represent the user's file download behavior;
[0098] The clustering module 202 is used to divide the data into blocks before acquiring the baseline, so that the baseline is more fine-grained and more accurate;
[0099] A baseline acquisition module 203, configured to acquire a user download behavior baseline;
[0100] Sensitivity check module 204, used to check whether the file downloaded by the user is a sensitive file;
[0101] The detection module 205 is configured to detect whether the user's downloading behavior is legal.
[0102] Optionally, the data processing module 201 is configured to:
[0103] Taking the IP address of each client on each server as the analysis unit,...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More