Malicious communication detection method, device, computer equipment and storage medium

Abstract

The present application relates to a malicious communication detection method, device, computer equipment and storage medium. The method includes: obtaining request data corresponding to multiple access requests within a preset time period; performing feature extraction on the request data to obtain request features of multiple dimensions; inputting the request features of the multiple dimensions into a malicious detection model , the malicious detection model includes a historical detection model and a similar detection model; performing malicious detection on the request feature through the historical detection model to obtain a first detection result; performing malicious detection on the request feature through the similar detection model , to obtain a second detection result; correcting the first detection result and the second detection result to obtain a malicious communication detection result. The method can effectively improve the accuracy of detecting malicious communication from a large number of access requests.

Description

technical field [0001] The present application relates to the field of computer technology, in particular to a malicious communication detection method, device, computer equipment and storage medium. Background technique [0002] With the development of computer technology, various kinds of software have sprung up, including malicious software that infringes upon the legitimate rights and interests of users. Malware usually hides its malicious communication behavior in a large number of access requests. Traditionally, malicious communications have been identified based on malware samples. However, this method of identifying malicious communication is easily bypassed by attackers, thus resulting in low accuracy in detecting malicious communication from a large number of access requests. Contents of the invention [0003] Based on this, it is necessary to provide a malicious communication detection method, device, computer equipment and storage medium capable of improving ...

AI Technical Summary

Problems solved by technology

However, this method of identifying malicious communication is easily bypassed by attackers, resulting in low accuracy in detecting malicious communication from a large number of access requests

Images