Method, device, equipment and product for identifying abnormal calling of API (Application Program Interface) gateway

Abstract

The invention provides a method, a device, equipment and a product for identifying abnormal calling of an API (Application Program Interface) gateway, and relates to the technical field of network security, the method comprises the following steps: acquiring log information, resource performance data and an internet protocol address generated during calling; inputting the log information, the resource performance data and the internet protocol address into an abnormal call identification model to obtain an identification result output by the abnormal call identification model; wherein the identification result comprises whether the call is abnormal or not and an abnormal type during the abnormal call; the abnormal call identification model is obtained by training based on sample log information, sample resource performance data and a sample internet protocol address. According to the method, the server performance field and the log information are obtained and serve as the input data of the trained exception call recognition model, and the exception recognition result is output by the exception call recognition model, so that a more accurate exception recognition result can be obtained.

Description

technical field [0001] The present invention relates to the technical field of network security, in particular to a method, device, equipment and product for identifying abnormal calls of API gateways. Background technique [0002] Abnormal behavior analysis, namely intrusion detection, is a new network security mechanism used to detect and prevent unauthorized access to the network by illegal users. At present, there are two methods for abnormal identification of application programming interface (Application Programming Interface, API) gateway calls, that is, API gateway call exception identification methods can be divided into two types. The first one is to identify traditional abnormal calls of performance indicators by setting rules, based on Business logic, setting the discovery rules for abnormal calls, and alarming for abnormalities through the set business logic; the second is to process historical operation logs based on business logic, cluster and divide the log c...

AI Technical Summary

Problems solved by technology

[0004] The invention provides a method, device, equipment and product for API gateway abnormal call identification, which are used to solve the defects of low accuracy rate of abnormal call identification and inaccurate classification in the prior art, and realize real-time, fast and high-speed recognition on the API gateway side. Accurate anomaly detection

Images