Container malicious behavior detection method and device

Abstract

The invention provides a container malicious behavior detection method and device. The method comprises the following steps: collecting a sample set of container behaviors, and establishing a behaviorlibrary of containers; taking the behavior library as a deep learning sample library, and performing training and combining by using a plurality of learning algorithms to obtain a container behaviorjudgment model; in response to operation of the container on the host, obtaining behavior data of the container and performing judgment by using the judgment model; and processing the container in response to the judgment that malicious behaviors exist in the behavior data of the container. By the adoption of the scheme, invasion of malicious software can be effectively defended, the container with malicious behaviors is prevented from running, and the safety of the container in the cloud computing and micro-service environment is improved.

Description

technical field [0001] This field relates to the computer field, and more specifically relates to a method and device for container malicious behavior detection. Background technique [0002] With the rapid development of today's information technology, the cloud computing platform based on the container-based microservice architecture has brought great convenience to enterprises and individuals, but while people are enjoying the convenience of work and life brought by the Internet, It is also threatened by computer malware all the time, and computer viruses have become one of the main threats to computer security. At the same time as the development of information technology, the technology of computer malware is also developing at the same time. It is developing in the direction of advanced, large-scale, complex, and service-oriented development and cross-platform development. Cloud hosts in the cloud computing environment have become its main object of attack. In respon...

AI Technical Summary

Problems solved by technology

[0002] With the rapid development of today's information technology, the cloud computing platform based on the container-based microservice architecture has brought great convenience to enterprises and individuals, but while people enjoy the convenience of work and life brought by the Internet, They are also threatened by computer malware all the time, and computer viruses have become one of the main threats to computer security.

Images