Virtual resource acquisition behavior detection method and device, equipment and medium
A virtual resource and detection method technology, applied in the detection field of virtual resource acquisition behavior, can solve the problem of low accuracy rate and achieve the effect of improving accuracy rate
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0038] figure 1 Embodiment 1 of the present invention provides a flow chart of a method for detecting virtual resource acquisition behavior. This embodiment is applicable to the case of detecting virtual resource acquisition behavior, and the method can be executed by a detection device for virtual resource acquisition behavior. , the device for detecting virtual resource acquisition behavior may be implemented in the form of hardware and / or software, and the device for detecting virtual resource acquisition behavior may be configured in an electronic device, for example, a deep packet inspection (Deep Packet Inspection, DPI) device. like figure 1 As shown, the method includes:
[0039]S110. Acquire a preset virtual resource acquisition rule base, wherein the virtual resource acquisition rule base includes a virtual resource acquisition protocol rule set and a virtual resource acquisition event rule set.
[0040] The virtual resource acquisition rule base may refer to variou...
Embodiment 2
[0052] Figure 2a This is a flowchart of a method for detecting a virtual resource acquisition behavior provided by the second embodiment of the present invention. This embodiment is refined based on the above-mentioned embodiment. set to perform full traffic matching on the traffic of the network to be monitored, obtain the first traffic packet that hits the virtual resource acquisition protocol rule set, and extract the bill file in the first traffic packet for refinement, which may specifically include: comparing the full traffic The special identification characters of the payload part of the packet header are used to extract keyword information; the keyword information is compared with the virtual resource acquisition protocol rule set, and a first traffic packet that satisfies the virtual resource acquisition protocol rule set is obtained, And extract the bill file in the first traffic packet. like Figure 2a As shown, the method includes:
[0053] S210. Acquire a pre...
Embodiment 3
[0068] Figure 3a This is a schematic structural diagram of an apparatus for detecting virtual resource acquisition behavior provided by Embodiment 3 of the present invention. like Figure 3a As shown, the device includes: a rule acquisition module 310, a first matching module 320, a second matching module 330 and a behavior identification module 340;
[0069] Wherein, the rule acquisition module 310 is configured to acquire a preset virtual resource acquisition rule base; wherein, the virtual resource acquisition rule base includes a virtual resource acquisition protocol rule set and a virtual resource acquisition event rule set;
[0070] The first matching module 320 is configured to perform full flow matching on the traffic of the network to be monitored according to the virtual resource acquisition protocol rule set, obtain the first traffic packet that hits the virtual resource acquisition protocol rule set, and extract the first traffic bill file in the package;
[00...
PUM
Abstract
Description
Claims
Application Information
- R&D Engineer
- R&D Manager
- IP Professional
- Industry Leading Data Capabilities
- Powerful AI technology
- Patent DNA Extraction
Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.
© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com