Flow detection method, device, equipment and medium

Abstract

The embodiment of the invention relates to a flow detection method and device, equipment and a medium. The method comprises the following steps: acquiring an access time sequence graph of a to-be-detected end; wherein the access time sequence graph comprises at least one target graph node with an abnormal traffic identifier; performing graph representation learning on the access time sequence graph to obtain a time sequence vector corresponding to each graph node in the access time sequence graph; performing clustering processing on the time sequence vector according to a preset clustering algorithm to obtain a plurality of clustering categories; and obtaining a target clustering category to which the target map node belongs from the plurality of clustering categories, and determining the abnormal traffic of the to-be-detected end based on the target clustering category. In the embodiment of the invention, the detection rate of the abnormal traffic with the unknown rule is improved, the network security is ensured, the automation degree of the abnormal traffic labeling in a long time period is improved, and the manpower cost consumed by the abnormal traffic labeling is reduced.

Description

technical field [0001] The present disclosure relates to the field of computer technology, and in particular to a flow detection method, device, equipment and medium. Background technique [0002] With the development of computer technology, network security is becoming more and more important. Abnormal traffic that threatens network security can be detected through traffic detection technology. [0003] In related technologies, the built-in rules may be used to detect traffic, and the traffic may be screened according to the built-in rules, so as to identify abnormal traffic. [0004] However, for the above technical solution, if the rules corresponding to the abnormal traffic are unknown, the abnormal traffic cannot be identified, thus causing hidden dangers in network security. Contents of the invention [0005] In order to solve the above technical problems or at least partly solve the above technical problems, the present disclosure provides a flow detection method, ...

AI Technical Summary

Problems solved by technology

[0004] However, for the above technical solutions, if the rules corresponding to the abnormal traffic are unknown, the abnormal traffic cannot be identified, thus causing hidden dangers in network security.

Images