Risk behavior detection method, device, equipment and computer storage medium

Abstract

The invention discloses a risk behavior detection method, a device, equipment and a computer readable storage medium, and the method comprises the steps: collecting historical behavior data of a user,carrying out the formatting of the historical behavior data, and extracting the feature information of the historical behavior data; selecting the feature information of the normal behavior historical data and the feature information of the dangerous behavior historical data from the feature information of the historical behavior data to generate a user behavior sample; training a classificationalgorithm by using the user behavior sample to obtain a target behavior classification algorithm; formatting the current business behavior data, and extracting feature information of the current business behavior data; inputting the feature information of the current business behavior data into a target behavior classification algorithm, and outputting a risk score of the current business behavior; and if the risk score is greater than or equal to the threshold, determining that the current business behavior is a high-risk behavior. According to the method, the device, the equipment and the computer readable storage medium provided by the invention, the efficiency, the accuracy and the real-time performance of risk behavior detection are improved.

Description

Technical field [0001] The present invention relates to the technical field of network security, in particular to a method, device, equipment and computer-readable storage medium for detecting risk behavior. Background technique [0002] Since the birth of the Internet, security threats have been accompanied by the development of corporate websites, and various web attacks and information leakage have frequently occurred. Advertising and junk have been common in various community websites and personal mailboxes, and they have been flooded. Due to the unknowability of the Internet, netizens are repeatedly deceived. Therefore, security is our bottom line for website services. [0003] The existing risk behavior evaluation method mainly adopts the rule engine method: when certain indicators of user behavior meet certain conditions, the operation is considered dangerous. For example: the user's operation occurred in an area where fraud is high, the amount exceeds a certain value, the ...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to provide a risky behavior detection method, device, equipment and computer-readable storage medium to solve the problem of low detection efficiency and accuracy of existing risky behavior detection methods

Images