Abnormal behavior detection method and device, computer equipment and storage medium

Abstract

The invention relates to the field of big data processing, in particular to an abnormal behavior detection method and device, computer equipment and a storage medium. The method comprises the following steps: acquiring a first personnel behavior monitoring table of personnel to be detected; extracting a monitoring index sequence from the first personnel behavior monitoring table; inputting the monitoring index sequence into a personal anomaly detection model obtained based on time feature training to obtain the behavior anomaly probability of the personnel to be detected at each time point andan anomaly time point corresponding to the behavior anomaly probability exceeding a preset threshold, thereby obtaining a first monitoring index; obtaining a second personnel behavior monitoring table, and extracting a second monitoring index; based on the first monitoring index, the second monitoring index and the behavior abnormality probability of the personnel to be detected, generating a behavior index corresponding to the personnel to be detected; and generating an early warning operation instruction corresponding to the personnel to be detected according to the behavior index, and sending the early warning operation instruction to the terminal. By adopting the method, the accuracy of abnormal behavior detection can be improved.

Description

technical field [0001] The present application relates to the field of big data processing, in particular to an abnormal behavior detection method, device, computer equipment and storage medium. Background technique [0002] Personnel abnormal behavior detection is an important topic of information security, and it is very important in the fields of information security internal control and data security. [0003] With the development of big data technology, enterprises can detect abnormal behaviors and prevent risk events by analyzing the data rules of personnel behavior. [0004] However, in the current data analysis method, the early warning rules set are numerous, scattered and isolated from each other, and it is impossible to conduct correlation analysis on behaviors, resulting in too many warnings and a high proportion of false positives, and the accuracy rate of abnormal behavior detection is very low. Low. Contents of the invention [0005] Based on this, it is n...

AI Technical Summary

Problems solved by technology

[0004] However, in the current data analysis method, the early warning rules set are numerous, scattered and isolated from each other, and it is impossible to conduct correlation analysis on behaviors, resulting in too many warnings and a high proportion of false positives, and the accuracy rate of abnormal behavior detection is very low. Low

Images