User abnormal behavior detection method and device

A behavior and user technology, applied in the computer field, can solve the problems of large amount of calculation, a large amount of training data, and the inability to realize real-time detection, so as to achieve the effect of improving real-time performance and reducing the amount of calculation

Inactive Publication Date: 2021-03-30
BEIJING GRIDSUM TECH CO LTD
View PDF10 Cites 2 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, this model training method requires a large amount of training data, and at the same time, the amount of calculation is large, and real-time detection cannot be realized.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • User abnormal behavior detection method and device
  • User abnormal behavior detection method and device
  • User abnormal behavior detection method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0063] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiment of the application will be clearly and completely described below in conjunction with the accompanying drawings in the embodiment of the application. Obviously, the described embodiment is only It is a part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.

[0064] There are a large number of user behaviors in the enterprise all the time. These user behaviors may be abnormal. In severe cases, it will cause the leakage of enterprise data and pose a certain threat to the data security of the enterprise. In the current user behavior detection method, the user's normal behavior model can be trained by using the user's hist...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The embodiment of the invention discloses a user abnormal behavior detection method and device, and the method comprises the steps: obtaining the historical features of a plurality of historical userbehaviors in advance, wherein the historical features comprise historical time features; carrying out the time kernel density estimation according to the values of a plurality of historical time features, and obtaining a time kernel density curve; in this way, after the current characteristics of the current user behavior are obtained, the current characteristics comprise the current time characteristics, and the behavior abnormality index corresponding to the current user behavior can be calculated based on the time kernel density curve and the current time characteristics. Since the time kernel density curve is determined according to the historical characteristics of the historical user behaviors, a large amount of calculation is needed, the time kernel density curve can be obtained inadvance, and when the user behaviors are detected in real time, the obtained time kernel density curve can be directly used for determining whether the user behaviors are normal or not; therefore, thecalculation amount in the abnormal behavior detection process is reduced, and the real-time performance of abnormal behavior detection is improved.

Description

technical field [0001] The present application relates to the field of computers, in particular to a method and device for detecting abnormal user behavior. Background technique [0002] A large number of user behaviors are generated all the time within the enterprise. For example, employees can copy texts through computers, chat through chat tools, visit websites through web pages, communicate through emails, etc. For some large enterprises, employees may reach above The number of network terminals may reach hundreds of thousands, and the amount of user behavior data generated is very large. [0003] Among these large numbers of user behaviors, there may be some abnormal behaviors, ranging from sending corporate confidential data via email to browsing shopping websites during working hours. These abnormal behaviors may cause corporate data leakage in severe cases, which is harmful to corporate data security. pose a certain threat. How to monitor user behavior in real time...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
CPCH04L63/1425H04L63/1416
Inventor 朱兴坤
Owner BEIJING GRIDSUM TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap