Exception handling method and device, electronic equipment and readable storage medium

Abstract

The invention discloses an exception handling method and device, electronic equipment and a computer readable storage medium. The method comprises the steps: obtaining first exception information, wherein the first exception information is abnormal process information or abnormal traffic information; obtaining second exception information corresponding to the first exception information by using the flow process information, wherein the flow process information is used for recording a corresponding relation between the process information and the flow information; and performing exception processing by using the target exception information, wherein the target exception information is second exception information, or the first exception information and the second exception information. Linkage between process angle anomaly detection and flow angle anomaly detection can be realized through the flow process information, and when one of the flow and the process is detected to be abnormal, the other one can be rapidly detected and processed, so that the influence of the rogue program on the electronic equipment and the influence of the rogue program on other electronic equipment can be accurately evaluated, and the safety protection effect is improved.

Description

technical field [0001] The present application relates to the technical field of network security, and in particular to an exception handling method, an exception handling device, electronic equipment, and a computer-readable storage medium. Background technique [0002] In order to carry out network attacks, attackers generally set and run malicious programs in electronic devices, and achieve attack purposes through the running of malicious programs. Related technologies usually detect the network traffic of the electronic device, and determine that there is a malicious program in the electronic device when abnormality is detected, and then perform antivirus on the electronic device. However, since malicious programs usually hide and camouflage, even if it is known that there are malicious programs in the electronic device, they may not be detected and killed, so the detection capability of related technologies is relatively weak. If the malicious program cannot be detecte...

AI Technical Summary

Problems solved by technology

However, because malicious programs usually hide and camouflage, even if it is known that there are malicious programs in electronic devices, they may not be detected and killed, so the detection ability of related technologies is relatively weak

If the malicious program cannot be detected, its impact on the electronic device itself and other electronic devices cannot be evaluated, resulting in the inability to effectively detect, kill and trace the source, and the security protection effect is poor

[0003] Therefore, related technologies cannot effectively perform killing and traceability, and the problem of poor security protection effect is a technical problem to be solved by those skilled in the art

Images