Distributed data node abnormal behavior detection method and device and server

Abstract

The embodiment of the invention relates to the technical field of data node analysis, in particular to a distributed data node abnormal behavior detection method and device and a server. In this method, when the first data node and the second data node carry out data interaction and node identifiers of the two nodes are the same, a first action instruction stream of a first data node and a secondaction instruction stream of a second data node can be determined from an interaction record between the first data node and the second data node and are analyzed by adopting the same action analysislogic; and when the first instruction feature and the second instruction feature obtained through analysis are not matched, different behavior recognition logics are adopted for recognition to obtaina first recognition result and a second recognition result, and then the data node with the abnormal behavior is determined based on the first recognition result and the second recognition result. Inthis way, on the premise that the working performance of the distributed data nodes is ensured, detection of abnormal behaviors is achieved, and then the invaded distributed data nodes are determined.

Description

technical field [0001] The present invention relates to the technical field of data node analysis, in particular to a method, device and server for detecting abnormal behavior of distributed data nodes. Background technique [0002] With the development of science and technology, distributed data processing technology has been applied in finance, Internet of Things, insurance and public welfare fields, etc., which can realize fast and safe interaction of data information and verification of the validity of data information. It is precisely because the application fields involved in distributed data processing technology are mostly important fields in national production, it is very important to ensure that distributed data nodes in distributed data networks are not hacked and attacked. Due to the large number of distributed data nodes in the distributed network, and distributed data nodes usually perform a large amount of data processing work, if an additional firewall or ha...

AI Technical Summary

Problems solved by technology

Due to the large number of distributed data nodes in the distributed network, and distributed data nodes usually perform a large amount of data processing work, if an additional firewall or hacker monitoring / interception mechanism is configured for each distributed data node to realize the distribution Abnormal behavior detection of distributed data nodes will greatly affect the performance of distributed data nodes (such as data processing speed and data processing accuracy)

Images