Asset abnormal behavior detection method and device and computer readable storage medium
A detection method and behavioral technology, applied in the Internet field, can solve problems such as inability to detect assets, and achieve the effect of improving security
Inactive Publication Date: 2020-12-04
BEIJING LANYUN TECH CO LTD
View PDF5 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
In this method of detecting the internal operation indicators of assets, only abnormalities in the operation of the assets themselves can be detected. In enterprise network security, the abnormal behavior of assets that are threatened or compromised within the enterprise usually manifests as abnormal network behavior. This kind of anomaly detection of internal operating indicators of assets cannot detect the network behavior of assets
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0036] Embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings. It should be noted that, in the case of no conflict, the embodiments of the present invention and the features in the embodiments can be combined arbitrarily with each other.
[0037] The steps shown in the flowcharts of the figures may be performed in a computer system, such as a set of computer-executable instructions. Also, although a logical order is shown in the flowcharts, in some cases the steps shown or described may be performed in an order different from that shown or described herein.
[0038] see figure 1 , an embodiment of the present invention proposes a method for detecting abnormal behavior of assets, including:
[0039] Step 100, acquiring network behavior indicators of assets in the enterprise network.
[0040] In an illustrative example, network behavior indicators include any combination of one or more of the following:
[0041] C...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The embodiment of the invention discloses an asset abnormal behavior detection method and device, and a computer readable storage medium. The method comprises the steps of: acquiring network behaviorindexes of assets in an enterprise network; and determining whether the network behavior indexes of the assets are normal according to whether the obtained network behavior indexes are within the range indicated by the baseline of the network behavior indexes of the group where the assets are located; wherein all the assets in the enterprise network are divided into N groups, and N is an integer greater than or equal to 1. According to the embodiment of the invention, whether the network behavior indexes are normal or not are determined by acquiring the network behavior indexes of the assets,so that the detection of the network behavior of the assets is realized, and the security of the network assets of an enterprise is improved.
Description
technical field [0001] Embodiments of the present invention relate to but are not limited to the field of Internet technologies, and in particular, refer to a method and device for detecting abnormal behavior of assets and a computer-readable storage medium. Background technique [0002] The core point of enterprise security is to ensure the security of network assets (such as servers, office machines, network equipment, etc.) in the enterprise. In the information age, the network assets in the enterprise (that is, the assets in the enterprise network environment) are the key components to ensure the normal operation of the network environment and the carrier of enterprise information resources. Therefore, the security of network assets is particularly important. [0003] When an asset is under threat or has been compromised, its network behavior often shows abnormal behaviors different from those of the same type of assets. Therefore, the detection of abnormal behavior is t...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
CPCH04L63/1408H04L63/1425
Inventor 虎志强
Owner BEIJING LANYUN TECH CO LTD