Method and device for identifying unauthorized operation of account

Abstract

The invention discloses an identification method for account unauthorized operation, which is applied to an operation and maintenance authority management platform. The operation and maintenance authority management platform includes a plurality of business domain subsystems, including the following steps: when it is detected that an account is logged into the system, obtain The account information of the account and the device information of the account logged into the device; identify whether the account is a public account; if the account is not a public account, calculate the risk value of the account operation; if the obtained risk value exceeds the threshold, the account will be Log out or modify permissions; and disclose the corresponding means. The present invention can be relatively simple, without occupying resources, to find possible shared accounts, and ensure to reduce the occurrence rate of unauthorized accounts; the calculation method of summation can eliminate a large number of occasional data login situations.

Description

technical field [0001] The present invention relates to the technical field of the Internet, in particular to a method and device for identifying unauthorized operation of an account. Background technique [0002] In the operation and maintenance of the professional information and communication department, due to the long-term lack of staff, the team may focus on operation and maintenance and neglect management. The update of equipment ledgers lags behind and omissions often occur, and there is a lack of corresponding management and control methods. [0003] In the daily operation and maintenance of the ICT professional department, the main security management risk point of unauthorized use of the account: the ICT operation and maintenance work of the grassroots units is implemented at the team level. After the position is adjusted, the adjustment information cannot be obtained immediately, resulting in a lag in the authority adjustment; There is a lack of effective managem...

AI Technical Summary

Problems solved by technology

[0002] In the operation and maintenance of the ICT professional department, due to the long-term lack of staff, the team may focus on operation and maintenance and neglect management. The update of equipment ledgers lags behind and omissions often occur, and there is a lack of corresponding management and control methods.

[0003] In the daily operation and maintenance of the ICT professional department, the main security management risk point of unauthorized use of the account: the ICT operation and maintenance work of the grassroots units is implemented at the team level. After the position is adjusted, the adjustment information cannot be obtained immediately, resulting in a lag in the authority adjustment; There is a lack of effective control measures for the cross-use of high-authority accounts, and the mixed use of high-authority accounts and proxy approval are common; remote login of accounts is a risk due to different security and usage conditions of computer systems

Images