Behavioral safety baseline status control method, device, equipment and storage medium

Abstract

Embodiments of the present invention provide a method, apparatus, device, and storage medium for managing and controlling a behavioral safety baseline state. The method includes: obtaining operating parameters of a first behavioral safety baseline; the operating parameters include an operating mode corresponding to the first behavioral safety baseline; and updating the current behavioral safety baseline state based on the current behavioral safety baseline state and the operating mode. The method of the embodiment of the present invention implements management and control of the behavioral safety baseline state.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a method, apparatus, device and storage medium for controlling a behavioral safety baseline state. Background Art

[0002] In recent years, with the development of machine learning and the rise of real-time computing frameworks, it is possible to obtain a user's behavioral security baseline by studying network data and logs. This behavioral security baseline can then be used as benchmark data for abnormal behavior analysis and detection.

[0003] In the process of analyzing and detecting abnormal behaviors, it is necessary to analyze and detect abnormal behaviors based on the behavioral safety baseline status. In order to improve the efficiency and accuracy of the analysis and detection of abnormal behaviors, it is usually necessary to ensure the accuracy of the behavioral safety baseline data, especially the accuracy of the behavioral safety baseline status. Therefore, how to achieve the management and control of the behavioral safety baseline status is a technical problem that technical personnel in this field urgently need to solve. Summary of the Invention

[0004] In response to the problems in the prior art, embodiments of the present invention provide a method, apparatus, device, and storage medium for managing and controlling a behavioral safety baseline state.

[0005] Specifically, the embodiments of the present invention provide the following technical solutions:

[0006] In a first aspect, an embodiment of the present invention provides a method for controlling a behavioral safety baseline state, comprising:

[0007] Obtaining an operation parameter of the first behavior security baseline; the operation parameter includes an operation mode corresponding to the first behavior security baseline;

[0008] Based on the current behavioral safety baseline status and operation mode, the current behavioral safety baseline status is updated. Further, based on the current behavioral safety baseline status and operation mode, the current behavioral safety baseline status is updated, including:

[0009] Update the current behavioral safety baseline status according to the current behavioral safety baseline status, operation mode and target information; the target information includes at least one of the following: the type of the first behavioral safety baseline, and the timer trigger information for managing the behavioral safety baseline status.

[0010] Furthermore, based on the current behavioral safety baseline status, operation mode, and target information, the current behavioral safety baseline status is updated, including:

[0011] If the operation mode is update mode and the type of the first behavioral safety baseline is automatic learning type, then the current behavioral safety baseline state is updated to an activated state; and / or,

[0012] If the operation mode is update mode and the type of the first behavioral safety baseline is user edit type, the current behavioral safety baseline state is updated to the waiting to start state.

[0013] Furthermore, when the current behavioral safety baseline state is an initial state, the method further includes:

[0014] If the operation mode is deletion, the current behavioral safety baseline state is maintained as the initial state; and / or,

[0015] If the timer trigger information indicates that the timer is triggered, the current behavioral safety baseline state is maintained as the initial state.

[0016] Furthermore, when the current behavioral safety baseline state is in an activated state, the current behavioral safety baseline state is updated according to the current behavioral safety baseline state, the operation mode, and the target information, including:

[0017] If the operation mode is update mode and the type of the first behavioral safety baseline is user edit type, then the current behavioral safety baseline state is updated to the waiting state; and / or,

[0018] If the operation mode is deletion mode and the first behavioral safety baseline is deleted successfully, the current behavioral safety baseline state is updated to the initial state; and / or,

[0019] If the timer triggering information indicates that the timer is triggered, the current behavioral safety baseline state is updated to wait for the next behavioral safety baseline state.

[0020] Furthermore, when the current behavioral safety baseline state is an activated state, the method further includes:

[0021] If the operation mode is the update mode and the type of the first behavioral safety baseline is the automatic learning type, then the current behavioral safety baseline state is maintained as the activated state; and / or,

[0022] If the operation mode is deletion and the deletion of the first behavioral safety baseline fails, the current behavioral safety baseline status will be kept as active.

[0023] Furthermore, when the current behavioral safety baseline state is in the waiting state, the current behavioral safety baseline state is updated according to the current behavioral safety baseline state, the operation mode, and the target information, including:

[0024] If the operation mode is deletion mode, and the activation behavior safety baseline parameter included in the operation parameters is empty, the current behavior safety baseline state is updated to the initial state; the activation behavior safety baseline parameter indicates that the currently activated behavior safety baseline is an automatic learning type; and / or,

[0025] If the operation mode is deletion mode, and the activation behavior safety baseline parameter included in the operation parameters is not empty, then the current behavior safety baseline state is updated to the activation state; and / or,

[0026] If the timer trigger information indicates that the timer is triggered, the current behavioral safety baseline state is updated to the waiting end state.

[0027] Furthermore, when the current behavioral safety baseline state is a waiting-to-start state, the method further includes:

[0028] If the operation mode is update mode, the current behavioral safety baseline state is maintained in the waiting to start state;

[0029] If the type of the first behavioral safety baseline is an automatic learning type, the activation behavioral safety baseline parameter is set to the identifier of the first behavioral safety baseline; and / or,

[0030] If the type of the first behavioral security baseline is a user-edited type, the waiting-to-start behavioral security baseline parameter included in the operation parameters is set to the identifier of the first behavioral security baseline, and the trigger time of the timer is set to the effective time of the first behavioral security baseline; the waiting-to-start behavioral security baseline parameter indicates that the behavioral security baseline to be started is a user-edited type.

[0031] Furthermore, when the current behavioral safety baseline state is in the waiting end state, the current behavioral safety baseline state is updated according to the current behavioral safety baseline state, the operation mode, and the target information, including:

[0032] If the operation mode is update mode and the type of the first behavioral safety baseline is user edit type, then the current behavioral safety baseline state is updated to the waiting state; and / or,

[0033] If the operation mode is the deletion mode, and the activation behavior safety baseline parameter included in the operation parameters is empty, then the current behavior safety baseline state is updated to the initial state; and / or,

[0034] If the operation mode is deletion mode and the activation behavior safety baseline parameter is not empty, the current behavior safety baseline state is updated to activation state; and / or,

[0035] If the timer trigger information indicates that the timer is triggered and the activation behavior safety baseline parameter is empty, the current behavior safety baseline state is updated to wait for the next behavior safety baseline state; and / or,

[0036] If the timer trigger information indicates that the timer is triggered and the activation behavior safety baseline parameter is not empty, the current behavior safety baseline state is updated to the activation state. Further, if the current behavior safety baseline state is the waiting end state, the method further includes:

[0037] If the operation mode is update mode and the type of the first behavioral safety baseline is automatic learning type, the current behavioral safety baseline state is maintained in the waiting end state, and the activation behavioral safety baseline parameter is set to the identifier of the first behavioral safety baseline.

[0038] Furthermore, when the current behavioral safety baseline state is waiting for the next behavioral safety baseline state, the current behavioral safety baseline state is updated according to the current behavioral safety baseline state, the operation mode, and the target information, including:

[0039] If the operation mode is update mode and the type of the first behavioral safety baseline is automatic learning type, then the current behavioral safety baseline state is updated to an activated state; and / or,

[0040] If the operation mode is update mode and the type of the first behavioral safety baseline is user edit type, then the current behavioral safety baseline state is updated to the waiting state; and / or,

[0041] If the operation mode is deletion and the first behavioral safety baseline is deleted successfully, the current behavioral safety baseline state is updated to the initial state.

[0042] Furthermore, when the current behavioral safety baseline state is waiting for the next behavioral safety baseline state, the method further includes:

[0043] If the operation mode is deletion mode and the deletion of the first behavioral safety baseline fails, the current behavioral safety baseline state is maintained as waiting for the next behavioral safety baseline state; and / or,

[0044] If the timer triggering information indicates that the timer is triggered, the current behavior safety baseline state is maintained to wait for the next behavior safety baseline state.

[0045] Furthermore, the behavioral safety baseline status control method also includes:

[0046] If the operation mode is deletion, the first line is deleted as the security baseline; and / or,

[0047] If the operation mode is an update mode, a second behavioral security baseline to be updated is obtained according to the operation parameters, and the first behavioral security baseline is replaced by the second behavioral security baseline.

[0048] In a second aspect, an embodiment of the present invention further provides a device for updating a behavioral safety baseline state, comprising:

[0049] An acquisition module, specifically configured to acquire operation parameters of the first behavioral security baseline; the operation parameters include an operation mode corresponding to the first behavioral security baseline;

[0050] The processing module is specifically used to update the current behavioral safety baseline state according to the current behavioral safety baseline state and operation mode.

[0051] In a third aspect, an embodiment of the present invention further provides an electronic device comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein when the processor executes the program, the steps of the behavioral safety baseline status control method as described in the first aspect are implemented.

[0052] In a fourth aspect, an embodiment of the present invention further provides a non-transitory computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps of the behavioral safety baseline status control method as described in the first aspect are implemented.

[0053] In a fifth aspect, an embodiment of the present invention further provides a computer program product, comprising a computer program, which, when executed by a processor, implements the steps of the behavioral safety baseline status control method as described in the first aspect.

[0054] The behavioral safety baseline status management and control method, device, equipment and storage medium provided in the embodiments of the present invention can manage the behavioral safety baseline status by obtaining the operation mode of the first behavioral safety baseline, thereby ensuring the accuracy of the behavioral safety baseline status and thus improving the accuracy of abnormal behavior detection. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] In order to more clearly illustrate the technical solutions in the present invention or the prior art, a brief introduction is given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0056] Figure 1 This is a flow chart of a method for controlling behavioral safety baseline status provided by an embodiment of the present invention;

[0057] Figure 2This is a flow chart of another behavior safety baseline status management method provided by an embodiment of the present invention;

[0058] Figure 3 This is a flow chart of controlling the behavior safety baseline state when the behavior safety baseline state is in the initial state, provided by an embodiment of the present invention;

[0059] Figure 4 This is a flow chart of controlling the behavior safety baseline state when the behavior safety baseline state is activated, as provided in an embodiment of the present invention;

[0060] Figure 5 This is a flow chart of controlling the behavior safety baseline state when the behavior safety baseline state is in the waiting-to-start state, provided by an embodiment of the present invention;

[0061] Figure 6 This is a flow chart of controlling the behavior safety baseline state when the behavior safety baseline state is in the waiting end state provided by an embodiment of the present invention;

[0062] Figure 7 This is a flow chart of controlling the behavior safety baseline state when the behavior safety baseline state is waiting for the next behavior safety baseline state provided by an embodiment of the present invention;

[0063] Figure 8 This is a behavioral safety baseline state transition diagram provided by an embodiment of the present invention;

[0064] Figure 9 Schematic diagram of the structure of the behavior safety baseline state control device provided by an embodiment of the present invention;

[0065] Figure 10 It is a structural diagram of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0066] To make the objectives, technical solutions, and advantages of the present invention more clear, the technical solutions of the present invention will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the embodiments described are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts shall fall within the scope of protection of the present invention.

[0067] In the embodiment of the present invention, the behavioral security baseline refers to the one obtained based on user behavior data. User behavior data includes, for example, the time, quantity, user behavior, traffic usage, etc. The behavioral security baseline is usually obtained in time periods. The behavioral security baseline can represent the behavioral data of each user behavior in at least one user behavior that occurs in at least one time period within a preset time range for one or more users.

[0068] In related technologies, during the analysis and detection of abnormal behaviors, it is necessary to analyze and detect abnormal behaviors based on the behavioral safety baseline status. In order to improve the efficiency and accuracy of the analysis and detection of abnormal behaviors, it is usually necessary to ensure the accuracy of the behavioral safety baseline data, especially the accuracy of the behavioral safety baseline status. Therefore, how to achieve the management and control of the behavioral safety baseline status is a technical problem that technical personnel in this field urgently need to solve.

[0069] The behavioral safety baseline method of the embodiment of the present invention can manage and control the behavioral safety baseline status by obtaining the operation mode of the first behavioral safety baseline, thereby ensuring the accuracy of the behavioral safety baseline status and further improving the accuracy of abnormal behavior detection.

[0070] The following combination Figures 1-10 The technical solution of the present invention is described in detail with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described in detail in some embodiments.

[0071] Figure 1 This is a flow chart of an embodiment of the behavior safety baseline state control method provided by the embodiment of the present invention. Figure 1 As shown, the method provided in this embodiment includes:

[0072] Step 101: Obtain operation parameters of a first behavior security baseline; the operation parameters include an operation mode corresponding to the first behavior security baseline;

[0073] Specifically, the first behavioral safety baseline can be a behavioral safety baseline generated by machine learning, or a behavioral safety baseline edited and issued by the user; the operation method of the first behavioral safety baseline is used to indicate how to perform the operation processing of the behavioral safety baseline.

[0074] For example, the first behavioral safety baseline is a behavioral safety baseline obtained by machine learning, and the obtained operating parameters of the behavioral safety baseline include: behavioral safety baseline operation mode indication parameters, behavioral safety baseline identification parameters, behavioral safety baseline effective time parameters, behavioral safety baseline expiration time parameters, behavioral safety baseline expiration time extension switch parameters and behavioral safety baseline data parameters. Among them, the behavioral security baseline operation mode indication parameter is used to indicate the operation mode of the behavioral security baseline. If the behavioral security baseline operation mode indication parameter is set to deletion mode, it means that the operation mode of the behavioral security baseline is deletion mode. If the behavioral security baseline operation mode indication parameter is set to update mode, it means that the operation mode of the behavioral security baseline is update mode. If the behavioral security baseline identification parameter is set to 1, it means that the behavioral security baseline identified as 1 is to be operated. If the behavioral security baseline effective time parameter is set to empty, it means that the behavioral security baseline takes effect immediately. If the behavioral security baseline effective time parameter is set to "2021-12-10 19:32:14.449", it means that the behavioral security baseline takes effect from the set effective time "2021-12-10 19:32:14.449"; if the behavioral security baseline expiration time parameter is set to empty, it means that the behavioral security baseline is always effective. If the behavioral security baseline expiration time parameter is set to "2021-12-10 19:33:14.449", it means that the behavioral security baseline takes effect from the set expiration time "2021-12-10 19:33:14.449" begins to expire. If both the behavioral safety baseline effective time parameter and the behavioral safety baseline expiration time parameter are set to non-empty, the parameter value of the behavioral safety baseline effective time parameter must be less than the parameter value of the behavioral safety baseline expiration time parameter. If the behavioral safety baseline expiration time extension switch parameter is set to on, it means that when the behavioral safety baseline expires, the behavioral safety baseline expiration time will be extended until the next behavioral safety baseline takes effect. The behavioral safety baseline data parameter represents specific behavioral safety baseline data.

[0075] Exemplarily, the operating parameters are as follows:

[0076]

[0077] The definition and function of behavioral safety baseline parameters are shown in Table 1:

[0078] Table 1

[0079]

[0080]

[0081] Optionally, if the operation mode is a deletion mode, the first line is deleted as the security baseline; and / or,

[0082] If the operation mode is an update mode, a second behavioral security baseline to be updated is obtained according to the operation parameters, and the first behavioral security baseline is replaced by the second behavioral security baseline.

[0083] Specifically, target processing is performed on the first behavioral security baseline based on the operation mode. That is, based on the acquired operation mode, the first behavioral security baseline is processed accordingly. If the operation mode is a delete mode, the first behavioral security baseline is deleted; if the operation mode is an update mode, the first behavioral security baseline is updated accordingly. Optionally, if the operation mode for acquiring the first behavioral security baseline is a delete mode, the first behavioral security baseline is deleted; if the operation mode for acquiring the first behavioral security baseline is an update mode, the first behavioral security baseline is updated accordingly. Optionally, a second behavioral security baseline to be updated is acquired based on the operation parameters, and the first behavioral security baseline is replaced with the second behavioral security baseline.

[0084] Step 102: Update the current behavioral safety baseline state according to the current behavioral safety baseline state and operation mode.

[0085] Specifically, according to the current behavioral safety baseline state and operation mode, the current behavioral safety baseline state is updated; optionally, as Figure 2 As shown in the figure, the baseline management state machine is used to implement the management and control of the behavioral safety baseline state. The specific steps are as follows:

[0086] First, a behavioral safety baseline is obtained. The behavioral safety baseline may be a previously obtained behavioral safety baseline, which can be updated or deleted. The behavioral safety baseline may be obtained through machine learning or edited and issued by the user.

[0087] Then, the behavioral security baseline is targeted and processed according to the obtained operation mode; if the operation mode is an update mode, the behavioral security baseline is updated; if the operation mode is a delete mode, the corresponding behavioral security baseline is deleted.

[0088] Finally, the behavioral safety baseline status is managed and controlled through the behavioral safety baseline management state machine.

[0089] Optionally, the state interface of the behavioral safety baseline management state machine is defined as shown in Table 2 below:

[0090] Table 2

[0091]

[0092] For example, if N behavioral safety baselines have been obtained before, the corresponding behavioral safety baseline can be obtained according to the baseline ID and the safety baseline can be operated; optionally, the behavioral safety baseline state can be managed and controlled through the behavioral safety baseline management state machine to achieve the management and control of the first behavioral safety baseline state.

[0093] The method of the above embodiment obtains the operation mode of the first behavioral safety baseline; then, based on the operation mode of the first behavioral safety baseline, the behavioral safety baseline status can be managed and controlled, thereby ensuring the accuracy of the behavioral safety baseline status and further improving the accuracy of abnormal behavior detection.

[0094] In one embodiment, updating the current behavioral safety baseline state according to the current behavioral safety baseline state and the operation mode includes:

[0095] Update the current behavioral safety baseline status according to the current behavioral safety baseline status, operation mode and target information; the target information includes at least one of the following: the type of the first behavioral safety baseline, and the timer trigger information for managing the behavioral safety baseline status.

[0096] Specifically, when managing and controlling the behavioral safety baseline state according to the current behavioral safety baseline state and the operation mode, target information can also be obtained to complete the management and control of the behavioral safety baseline state; wherein the target information includes at least one of the following: the type of the first behavioral safety baseline, the timer trigger information for managing and controlling the behavioral safety baseline state; wherein the type of the behavioral safety baseline includes an automatic learning type and a user editing type, i.e., a behavioral safety baseline automatically learned from input data and a behavioral safety baseline edited and issued by the user; a timer for managing and controlling the behavioral safety baseline state, i.e., a timer set for managing and controlling the behavioral safety baseline state, and updating the behavioral safety baseline state when the timer is triggered.

[0097] For example, when the target information includes a timer for controlling the behavioral safety baseline status and is triggered, the current behavioral safety baseline status can be controlled in a timely manner according to the timer for controlling the behavioral safety baseline status, making the update of the behavioral safety baseline status more timely and accurate.

[0098] The method of the above embodiment controls the behavioral safety baseline state according to the current behavioral safety baseline state, operation mode and target information; that is, by obtaining the target information, the type of the first behavioral safety baseline and the timer trigger information for controlling the behavioral safety baseline state are also obtained; based on the target information, the current behavioral safety baseline state can be controlled in a timely manner, making the control of the behavioral safety baseline state more timely and accurate.

[0099] In one embodiment, when the current behavioral safety baseline state is an initial state, updating the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information includes:

[0100] If the operation mode is update mode and the type of the first behavioral safety baseline is automatic learning type, then the current behavioral safety baseline state is updated to an activated state; and / or,

[0101] If the operation mode is update mode and the type of the first behavioral safety baseline is user edit type, the current behavioral safety baseline state is updated to the waiting state;

[0102] Optionally, if the operation mode is deletion, the current behavioral safety baseline state is maintained as the initial state; and / or,

[0103] If the timer trigger information indicates that the timer is triggered, the current behavioral safety baseline state is maintained as the initial state.

[0104] Specifically, when the current behavioral safety baseline state is the initial state, if the operation mode is the update mode, and the type of the first behavioral safety baseline is the automatic learning type, the behavioral safety baseline state is updated to the activated state. That is, when the current behavioral safety baseline state is the initial state, when obtaining a behavioral safety baseline of the automatic learning type, and the operation mode of the behavioral safety baseline is the update mode, the current behavioral safety baseline state is updated to the activated state;

[0105] If the operation mode is update mode and the type of the first behavioral safety baseline is user edited type, the behavioral safety baseline status is updated to the waiting start state, that is, the obtained behavioral safety baseline of the user edited type is updated to the waiting start state; that is, when the behavioral safety baseline of the user edited type is obtained and the operation mode of the behavioral safety baseline is update mode, the current behavioral safety baseline status is updated to the waiting start state.

[0106] Optionally, if the operation mode is deletion mode, the current behavioral safety baseline state is maintained in the initial state; or, if the timer is triggered, the behavioral safety baseline state is maintained in the initial state; that is, when the operation mode of the behavioral safety baseline is deletion mode, the behavioral safety baseline state is maintained in the initial state; if the update timer for updating the behavioral safety baseline state is triggered, the behavioral safety baseline state is maintained in the initial state.

[0107] For example, Figure 3As shown, when the current behavioral safety baseline state is the initial state, if the operation mode is the update mode and the type of the first behavioral safety baseline is the automatic learning type, the behavioral safety baseline state is updated to the activated state, that is, the obtained automatic learning type behavioral safety baseline is updated to the activated state.

[0108] The method of the above embodiment, when the current behavioral safety baseline state is the initial state, can accurately determine how to control the current behavioral safety baseline state based on the operation mode of the first behavioral safety baseline, the type of the first behavioral safety baseline and the indication information of whether the timer for controlling the behavioral safety baseline state is triggered, so that the control of the behavioral safety baseline state is more accurate.

[0109] In one embodiment, when the current behavioral safety baseline state is in an activated state, updating the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information includes:

[0110] If the operation mode is update mode and the type of the first behavioral safety baseline is user edit type, then the current behavioral safety baseline state is updated to the waiting state; and / or,

[0111] If the operation mode is deletion mode and the first behavioral safety baseline is deleted successfully, the current behavioral safety baseline state is updated to the initial state; and / or,

[0112] If the timer triggering information indicates that the timer is triggered, the current behavioral safety baseline state is updated to wait for the next behavioral safety baseline state.

[0113] Optionally, when the current behavioral safety baseline state is an activated state, the method further includes:

[0114] If the operation mode is the update mode and the type of the first behavioral safety baseline is the automatic learning type, then the current behavioral safety baseline state is maintained as the activated state; and / or,

[0115] If the operation mode is deletion and the deletion of the first behavioral safety baseline fails, the current behavioral safety baseline status will be kept as active.

[0116] Specifically, when the behavioral safety baseline state is in the activated state, if the operation mode is the update mode and the type of the first behavioral safety baseline is the user-edited type, the behavioral safety baseline state is updated to the waiting-to-start state; that is, when the behavioral safety baseline of the user-edited type is obtained and the operation mode of the user-edited type behavioral safety baseline is the update mode, the behavioral safety baseline state is updated to the waiting-to-start state.

[0117] If the operation mode is deletion and the first behavioral safety baseline is deleted successfully, the behavioral safety baseline state is updated to the initial state; that is, if the operation mode of the behavioral safety baseline is deletion and the deletion method is executed successfully, the behavioral safety baseline state is updated to the initial state.

[0118] If the timer is triggered, the behavioral safety baseline state is updated to waiting for the next behavioral safety baseline state; that is, the update timer for updating the behavioral safety baseline state is triggered, and the obtained behavioral safety baseline state is updated to waiting for the next behavioral safety baseline state.

[0119] Optionally, if the operation mode is update mode and the type of the first behavioral safety baseline is automatic learning type, the behavioral safety baseline status is maintained in an activated state; if the operation mode is deletion mode and the deletion of the first behavioral safety baseline fails, the behavioral safety baseline status is maintained in an activated state; that is, when obtaining a user-edited type behavioral safety baseline and the operation mode of the user-edited type behavioral safety baseline is update mode, the behavioral safety baseline status is maintained in an activated state.

[0120] For example, Figure 4 As shown, when the current behavioral safety baseline state is the activated state, if the operation mode is the update mode and the type of the first behavioral safety baseline is the user type, the behavioral safety baseline state is updated to the waiting start state, that is, the obtained user editing type behavioral safety baseline is updated to the waiting start state.

[0121] The method of the above embodiment, when the current behavioral safety baseline state is in an activated state, can accurately determine how to manage and control the current behavioral safety baseline state based on the operation mode of the first behavioral safety baseline, the type of the first behavioral safety baseline and the indication information of whether the timer for updating the behavioral safety baseline state is triggered, so that the management and control of the behavioral safety baseline state is more accurate.

[0122] In one embodiment, when the current behavioral safety baseline state is in the waiting state, updating the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information includes:

[0123] If the operation mode is deletion mode, and the activation behavior safety baseline parameter included in the operation parameters is empty, the current behavior safety baseline state is updated to the initial state; the activation behavior safety baseline parameter indicates that the currently activated behavior safety baseline is an automatic learning type; and / or,

[0124] If the operation mode is deletion mode, and the activation behavior safety baseline parameter included in the operation parameters is not empty, then the current behavior safety baseline state is updated to the activation state; and / or,

[0125] If the timer trigger information indicates that the timer is triggered, the current behavioral safety baseline state is updated to the waiting end state.

[0126] Optionally, if the operation mode is the update mode, the current behavioral safety baseline state is maintained in the waiting-to-start state; wherein, if the type of the first behavioral safety baseline is the automatic learning type, the activation behavioral safety baseline parameter is set to the identifier of the first behavioral safety baseline; and / or, if the type of the first behavioral safety baseline is the user-edited type, the waiting-to-start behavioral safety baseline parameter included in the operation parameters is set to the identifier of the first behavioral safety baseline, and the trigger time of the timer is set to the effective time of the first behavioral safety baseline; the waiting-to-start behavioral safety baseline parameter indicates that the behavioral safety baseline to be started is the user-edited type.

[0127] Specifically, when the behavioral safety baseline state is in the waiting to start state, if the operation mode is the deletion mode, and the activation behavior safety baseline parameter included in the operation parameters is empty, the behavioral safety baseline state is updated to the initial state; the activation behavior safety baseline parameter represents the currently activated automatic learning type behavioral safety baseline; that is, the operation mode of the first behavioral safety baseline obtained is the deletion mode, and the activation behavior safety baseline parameter does not represent the currently activated behavioral safety baseline, then the behavioral safety baseline state is updated to the initial state.

[0128] If the operation mode is deletion mode, and the activation behavioral safety baseline parameter included in the operation parameters is not empty, the behavioral safety baseline status is updated to the activation state; that is, the obtained behavioral safety baseline is deleted, and the activation behavioral safety baseline parameter includes the currently activated behavioral safety baseline, then the behavioral safety baseline status is updated to the activation state.

[0129] If the timer is triggered, the behavioral safety baseline state is updated to the waiting end state; that is, if the update timer for updating the behavioral safety baseline state is triggered, the behavioral safety baseline state is updated to the waiting end state.

[0130] Optionally, if the operation mode is update mode, the behavioral security baseline state remains in the waiting-to-start state. Specifically, if the first behavioral security baseline type is automatic learning, the activation behavioral security baseline parameter is set to the identifier of the first behavioral security baseline. If the first behavioral security baseline type is user-edited, the waiting-to-start behavioral security baseline parameter included in the operation parameters is set to the identifier of the first behavioral security baseline, and the timer trigger time is set to the effective time of the first behavioral security baseline. The waiting-to-start behavioral security baseline parameter indicates the user-edited behavioral security baseline to be started. In other words, if the operation mode of the acquired behavioral security baseline is update mode, the behavioral security baseline state remains in the waiting-to-start state.

[0131] For example, Figure 5 As shown, when the current behavioral safety baseline state is the waiting to start state, if the operation mode is the deletion mode and the activation behavior safety baseline parameter included in the operation parameters is empty, the behavioral safety baseline state is updated to the initial state; the activation behavior safety baseline parameter represents the identifier of the currently activated automatic learning type behavioral safety baseline; that is, if the operation mode of the first behavioral safety baseline obtained is the deletion mode, and the activation behavior safety baseline parameter does not represent the identifier of the currently activated behavioral safety baseline, the behavioral safety baseline state is updated to the initial state.

[0132] The method of the above embodiment, when the current behavioral safety baseline state is in the waiting to start state, can accurately determine how to update the current behavioral safety baseline state based on the operation mode of the first behavioral safety baseline, the type of the first behavioral safety baseline and the indication information of whether the timer for updating the behavioral safety baseline state is triggered, so that the update of the behavioral safety baseline state is more accurate.

[0133] In one embodiment, when the current behavioral safety baseline state is in the waiting state, updating the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information includes:

[0134] If the operation mode is update mode and the type of the first behavioral safety baseline is user edit type, then the current behavioral safety baseline state is updated to the waiting state; and / or,

[0135] If the operation mode is the deletion mode, and the activation behavior safety baseline parameter included in the operation parameters is empty, then the current behavior safety baseline state is updated to the initial state; and / or,

[0136] If the operation mode is deletion mode and the activation behavior safety baseline parameter is not empty, the current behavior safety baseline state is updated to activation state; and / or,

[0137] If the timer trigger information indicates that the timer is triggered and the activation behavior safety baseline parameter is empty, the current behavior safety baseline state is updated to wait for the next behavior safety baseline state; and / or,

[0138] If the timer trigger information indicates that the timer is triggered and the activated behavioral safety baseline parameter is not empty, the current behavioral safety baseline state is updated to the activated state.

[0139] Optionally, if the operation mode is update mode and the type of the first behavioral safety baseline is automatic learning type, the current behavioral safety baseline state is maintained in the waiting end state, and the activation behavioral safety baseline parameter is set to the identifier of the first behavioral safety baseline.

[0140] Specifically, when the behavioral safety baseline state is in the waiting end state, if the operation mode is the update mode and the type of the first behavioral safety baseline is the user edited type, the behavioral safety baseline state is updated to the waiting start state; that is, the obtained user edited type behavioral safety baseline is updated to the waiting start state.

[0141] If the operation mode is deletion mode, and the activation behavior safety baseline parameter included in the operation parameters is empty, the behavioral safety baseline state is updated to the initial state; that is, the operation mode of the first behavioral safety baseline obtained is deletion mode, and the activation behavior safety baseline parameter does not have an identifier indicating the currently activated behavioral safety baseline, then the behavioral safety baseline state is updated to the initial state.

[0142] If the operation mode is deletion mode and the activation behavioral safety baseline parameter is not empty, the behavioral safety baseline status is updated to the activation state; that is, the operation mode of the first behavioral safety baseline obtained is deletion mode, and the activation behavioral safety baseline parameter includes the currently activated behavioral safety baseline, then the behavioral safety baseline status is updated to the activation state.

[0143] If the timer is triggered and the activated behavioral safety baseline parameter is empty, the behavioral safety baseline state is updated to waiting for the next behavioral safety baseline state; that is, if the update timer for updating the behavioral safety baseline state is triggered and the activated behavioral safety baseline parameter does not have an identifier indicating the currently activated behavioral safety baseline, the behavioral safety baseline state is updated to waiting for the next behavioral safety baseline state.

[0144] If the timer is triggered and the activation behavioral safety baseline parameter is not empty, the behavioral safety baseline status is updated to the activated state; that is, if the update timer for updating the behavioral safety baseline status is triggered and the activation behavioral safety baseline parameter includes an identifier representing the currently activated behavioral safety baseline, the behavioral safety baseline status is updated to the activated state.

[0145] Optionally, if the operation mode is the update mode and the type of the first behavioral safety baseline is the automatic learning type, the behavioral safety baseline state is maintained in the waiting end state, and the activation behavioral safety baseline parameter is set to the identifier of the first behavioral safety baseline; that is, when the operation mode of the obtained automatic learning type behavioral safety baseline is the update mode, the behavioral safety baseline state is maintained in the waiting end state, and the activation behavioral safety baseline parameter is set to the identifier of the obtained behavioral safety baseline.

[0146] For example, Figure 6 As shown, when the behavioral safety baseline state is in the waiting end state, if the operation mode is the update mode and the type of the first behavioral safety baseline is the user edited type, the behavioral safety baseline state is updated to the waiting start state; that is, the obtained user edited type behavioral safety baseline is updated to the waiting start state.

[0147] The method of the above embodiment, when the behavioral safety baseline state is in the waiting end state, can accurately determine how to manage and control the current behavioral safety baseline state based on the operation mode of the first behavioral safety baseline, the type of the first behavioral safety baseline and the indication information of whether the timer for updating the behavioral safety baseline state is triggered, so that the management and control of the behavioral safety baseline state is more accurate.

[0148] In one embodiment, when the current behavioral safety baseline state is waiting for the next behavioral safety baseline state, updating the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information includes:

[0149] If the operation mode is update mode and the type of the first behavioral safety baseline is automatic learning type, then the current behavioral safety baseline state is updated to an activated state; and / or,

[0150] If the operation mode is update mode and the type of the first behavioral safety baseline is user edit type, then the current behavioral safety baseline state is updated to the waiting state; and / or,

[0151] If the operation mode is deletion and the first behavioral safety baseline is deleted successfully, the current behavioral safety baseline state is updated to the initial state.

[0152] Optionally, when the current behavioral safety baseline state is waiting for the next behavioral safety baseline state, the method further includes:

[0153] If the operation mode is deletion mode and the deletion of the first behavioral safety baseline fails, the current behavioral safety baseline state is maintained as waiting for the next behavioral safety baseline state; and / or,

[0154] If the timer triggering information indicates that the timer is triggered, the current behavior safety baseline state is maintained to wait for the next behavior safety baseline state.

[0155] Specifically, when the behavioral safety baseline state is waiting for the next behavioral safety baseline state, if the operation mode is update mode and the type of the first behavioral safety baseline is automatic learning type, the behavioral safety baseline state is updated to activation state; that is, a behavioral safety baseline of automatic learning type is obtained, and the operation mode of the behavioral safety baseline is update mode, then the behavioral safety baseline state is updated to activation state.

[0156] If the operation mode is update mode and the type of the first behavioral safety baseline is user edited type, the behavioral safety baseline status is updated to the waiting to start state; that is, if the behavioral safety baseline of the user edited type is obtained and the operation mode of the behavioral safety baseline is update mode, the behavioral safety baseline status is updated to the waiting to start state.

[0157] If the operation mode is deletion mode and the first behavioral safety baseline is deleted successfully, the behavioral safety baseline state is updated to the initial state; that is, if the operation mode of the obtained behavioral safety baseline is deletion mode and the deletion mode is successfully executed, the behavioral safety baseline state is updated to the initial state.

[0158] Optionally, if the operation mode is deletion mode and the deletion of the first behavioral safety baseline fails, the behavioral safety baseline state is maintained in waiting for the next behavioral safety baseline state; that is, if the operation mode of the obtained behavioral safety baseline is deletion mode and the deletion mode fails, the behavioral safety baseline state is maintained in waiting for the next behavioral safety baseline state.

[0159] Optionally, if the timer is triggered, the behavioral safety baseline state is maintained to wait for the next behavioral safety baseline state; that is, if the update timer for updating the behavioral safety baseline state is triggered, the behavioral safety baseline state is maintained to wait for the next behavioral safety baseline state.

[0160] For example, Figure 7 As shown, when the behavioral safety baseline state is waiting for the next behavioral safety baseline state, if the operation mode is the update mode and the type of the first behavioral safety baseline is the automatic learning type, the behavioral safety baseline state is updated to the activated state; that is, the behavioral safety baseline of the automatic learning type is obtained, and the operation mode of the behavioral safety baseline is the update mode, then the behavioral safety baseline state is updated to the activated state.

[0161] The method of the above embodiment, when the behavioral safety baseline state is waiting for the next behavioral safety baseline state, can accurately determine how to manage and control the current behavioral safety baseline state based on the operation mode of the first behavioral safety baseline, the type of the first behavioral safety baseline and the indication information of whether the timer for updating the behavioral safety baseline state is triggered, so that the management and control of the behavioral safety baseline state is more accurate.

[0162] For example, Figure 8 As shown, the behavioral safety baseline state update jump diagram illustrates the updated behavioral safety baseline state determined according to the operation mode and target information when the behavioral safety baseline state is the initial state, the activated state, the waiting start state, the waiting end state, and the waiting next behavioral safety baseline state.

[0163] The following describes the behavioral safety baseline state control device provided by the present invention. The behavioral safety baseline state updating device described below and the behavioral safety baseline state control method described above can be referenced to each other.

[0164] Figure 9 Schematic diagram of the structure of the behavioral safety baseline device provided by the present invention. The behavioral safety baseline status updating device provided in this embodiment includes:

[0165] An acquisition module 710 is configured to acquire operation parameters of the first behavior security baseline; the operation parameters include an operation mode corresponding to the first behavior security baseline;

[0166] The processing module 720 is configured to update the current behavioral safety baseline state according to the current behavioral safety baseline state and the operation mode.

[0167] Optionally, the processing module 720 is specifically used to update the current behavioral safety baseline state based on the current behavioral safety baseline state, operation mode and target information; the target information includes at least one of the following: the type of the first behavioral safety baseline, and the timer trigger information for managing the behavioral safety baseline state.

[0168] Optionally, the processing module 720 is specifically configured to: when the current behavioral safety baseline state is an initial state, update the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information, including:

[0169] If the operation mode is update mode and the type of the first behavioral safety baseline is automatic learning type, then the current behavioral safety baseline state is updated to an activated state; and / or,

[0170] If the operation mode is update mode and the type of the first behavioral safety baseline is user edit type, the current behavioral safety baseline state is updated to the waiting to start state.

[0171] Optionally, if the operation mode is deletion, the current behavioral safety baseline state is maintained as the initial state; and / or,

[0172] If the timer trigger information indicates that the timer is triggered, the current behavioral safety baseline state is maintained as the initial state.

[0173] Optionally, the processing module 720 is specifically configured to: when the current behavioral safety baseline state is in an activated state, update the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information, including:

[0174] If the operation mode is update mode and the type of the first behavioral safety baseline is user edit type, then the current behavioral safety baseline state is updated to the waiting state; and / or,

[0175] If the operation mode is deletion mode and the first behavioral safety baseline is deleted successfully, the current behavioral safety baseline state is updated to the initial state; and / or,

[0176] If the timer triggering information indicates that the timer is triggered, the current behavioral safety baseline state is updated to wait for the next behavioral safety baseline state.

[0177] Optionally, if the operation mode is an update mode and the type of the first behavioral safety baseline is an automatic learning type, the current behavioral safety baseline state is maintained as an activated state; and / or,

[0178] If the operation mode is deletion and the deletion of the first behavioral safety baseline fails, the current behavioral safety baseline status will be kept as active.

[0179] Optionally, the processing module 720 is specifically configured to: when the current behavioral safety baseline state is in the waiting state, update the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information, including:

[0180] If the operation mode is deletion mode, and the activation behavior safety baseline parameter included in the operation parameters is empty, the current behavior safety baseline state is updated to the initial state; the activation behavior safety baseline parameter indicates that the currently activated behavior safety baseline is an automatic learning type; and / or,

[0181] If the operation mode is deletion mode, and the activation behavior safety baseline parameter included in the operation parameters is not empty, then the current behavior safety baseline state is updated to the activation state; and / or,

[0182] If the timer trigger information indicates that the timer is triggered, the current behavioral safety baseline state is updated to the waiting end state.

[0183] Optionally, if the operation mode is the update mode, the current behavioral safety baseline state is maintained in the waiting to start state;

[0184] If the type of the first behavioral safety baseline is an automatic learning type, the activation behavioral safety baseline parameter is set to the identifier of the first behavioral safety baseline; and / or,

[0185] If the type of the first behavioral security baseline is a user-edited type, the waiting-to-start behavioral security baseline parameter included in the operation parameters is set to the identifier of the first behavioral security baseline, and the trigger time of the timer is set to the effective time of the first behavioral security baseline; the waiting-to-start behavioral security baseline parameter indicates that the behavioral security baseline to be started is a user-edited type.

[0186] Optionally, the processing module 720 is specifically configured to: when the current behavioral safety baseline state is in the waiting end state, update the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information, including:

[0187] If the operation mode is update mode and the type of the first behavioral safety baseline is user edit type, then the current behavioral safety baseline state is updated to the waiting state; and / or,

[0188] If the operation mode is the deletion mode, and the activation behavior safety baseline parameter included in the operation parameters is empty, then the current behavior safety baseline state is updated to the initial state; and / or,

[0189] If the operation mode is deletion mode and the activation behavior safety baseline parameter is not empty, the current behavior safety baseline state is updated to activation state; and / or,

[0190] If the timer trigger information indicates that the timer is triggered and the activation behavior safety baseline parameter is empty, the current behavior safety baseline state is updated to wait for the next behavior safety baseline state; and / or,

[0191] If the timer trigger information indicates that the timer is triggered and the activated behavioral safety baseline parameter is not empty, the current behavioral safety baseline state is updated to the activated state.

[0192] Optionally, if the operation mode is update mode and the type of the first behavioral safety baseline is automatic learning type, the current behavioral safety baseline state is maintained in the waiting end state, and the activation behavioral safety baseline parameter is set to the identifier of the first behavioral safety baseline.

[0193] Optionally, the processing module 720 is specifically configured to: when the current behavioral safety baseline state is waiting for the next behavioral safety baseline state, update the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information, including:

[0194] If the operation mode is update mode and the type of the first behavioral safety baseline is automatic learning type, then the current behavioral safety baseline state is updated to an activated state; and / or,

[0195] If the operation mode is update mode and the type of the first behavioral safety baseline is user edit type, then the current behavioral safety baseline state is updated to the waiting state; and / or,

[0196] If the operation mode is deletion and the first behavioral safety baseline is deleted successfully, the current behavioral safety baseline state is updated to the initial state.

[0197] Optionally, if the operation mode is a deletion mode and the deletion of the first behavioral safety baseline fails, the current behavioral safety baseline state is maintained to wait for the next behavioral safety baseline state; and / or,

[0198] If the timer triggering information indicates that the timer is triggered, the current behavior safety baseline state is maintained to wait for the next behavior safety baseline state.

[0199] Optionally, the processing module 720 is specifically used to delete the first behavioral security baseline if the operation mode is a deletion mode; and / or, if the operation mode is an update mode, obtain a second behavioral security baseline to be updated according to the operation parameters, and replace the first behavioral security baseline with the second behavioral security baseline.

[0200] The device of the embodiment of the present invention is used to execute the method in any of the aforementioned method embodiments. Its implementation principle and technical effects are similar and will not be repeated here.

[0201] Figure 10An example of a physical structure diagram of an electronic device is provided, which may include: a processor 810, a communication interface 820, a memory 830, and a communication bus 840, wherein the processor 810, the communication interface 820, and the memory 830 communicate with each other via the communication bus 840. The processor 810 may call the logic instructions in the memory 830 to execute a behavioral safety baseline status control method, which includes: obtaining the operating parameters of the first behavioral safety baseline; the operating parameters include the operating mode corresponding to the first behavioral safety baseline; and updating the current behavioral safety baseline status according to the current behavioral safety baseline status and the operating mode. In addition, the logic instructions in the above-mentioned memory 830 may be implemented in the form of a software functional unit and may be stored in a computer-readable storage medium when sold or used as an independent product. Based on this understanding, the technical solution of the present invention, or the portion that contributes to the prior art, or the portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, a mobile hard drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0202] On the other hand, the present invention also provides a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer can execute the behavioral safety baseline status control method provided by the above methods, and the method includes: obtaining the operating parameters of the first behavioral safety baseline; the operating parameters include the operating mode corresponding to the first behavioral safety baseline; and updating the current behavioral safety baseline status according to the current behavioral safety baseline status and the operating mode.

[0203] On the other hand, the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, it is implemented to execute the above-mentioned behavioral safety baseline status control method provided above, the method including: obtaining the operating parameters of the first behavioral safety baseline; the operating parameters include the operating mode corresponding to the first behavioral safety baseline; updating the current behavioral safety baseline status according to the current behavioral safety baseline status and the operating mode.

[0204] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, i.e., they may be located in one location or distributed across multiple network units. Some or all of the modules may be selected based on actual needs to achieve the objectives of the present embodiment. Persons of ordinary skill in the art will be able to understand and implement the present invention without inventive effort.

[0205] Through the description of the above embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus a necessary general hardware platform, or of course, by hardware. Based on this understanding, the essence of the above technical solution or the part that contributes to the existing technology can be embodied in the form of a software product. The computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a magnetic disk, an optical disk, etc., and includes a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or certain parts of the embodiments.

[0206] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims

1. A behavior safety baseline state control method, characterized in that: include: Acquire operation parameters of the first behavior security baseline; the operation parameters include an operation mode corresponding to the first behavior security baseline; Updating the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and target information; the target information including at least one of the following: the type of the first behavioral safety baseline and timer trigger information for managing the behavioral safety baseline state; When the current behavioral safety baseline state is an initial state, updating the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information includes: If the operation mode is an update mode, and the type of the first behavioral safety baseline is an automatic learning type, then updating the current behavioral safety baseline state to an activated state; and / or, If the operation mode is an update mode, and the type of the first behavioral safety baseline is a user edit type, the current behavioral safety baseline state is updated to a waiting-to-start state.

2. The behavioral safety baseline state control method according to claim 1 is characterized in that: When the current behavioral safety baseline state is an initial state, the method further includes: If the operation mode is a deletion mode, the current behavioral safety baseline state is maintained as the initial state; and / or, If the timer triggering information indicates that a timer is triggered, the current behavioral safety baseline state is maintained as the initial state.

3. The behavioral safety baseline state control method according to claim 1 is characterized in that: When the current behavioral safety baseline state is in an activated state, updating the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information includes: If the operation mode is an update mode, and the type of the first behavioral safety baseline is a user edit type, then the current behavioral safety baseline state is updated to a waiting start state; and / or, If the operation mode is a deletion mode and the first behavioral safety baseline is deleted successfully, then the current behavioral safety baseline state is updated to an initial state; and / or, If the timer triggering information indicates that a timer is triggered, the current behavior safety baseline state is updated to wait for the next behavior safety baseline state.

4. The behavioral safety baseline state control method according to claim 1 is characterized in that: When the current behavioral safety baseline state is an activated state, the method further includes: If the operation mode is an update mode, and the type of the first behavioral safety baseline is an automatic learning type, then maintaining the current behavioral safety baseline state as the activated state; and / or, If the operation mode is a deletion mode and the deletion of the first behavioral safety baseline fails, the current behavioral safety baseline state is maintained as the activation state.

5. The behavioral safety baseline state control method according to claim 1 is characterized in that: When the current behavioral safety baseline state is in the waiting-to-start state, updating the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information includes: If the operation mode is a deletion mode, and the activation behavior safety baseline parameter included in the operation parameters is empty, then the current behavior safety baseline state is updated to the initial state; the activation behavior safety baseline parameter indicates that the currently activated behavior safety baseline is an automatic learning type; and / or, If the operation mode is a deletion mode, and the activation behavior safety baseline parameter included in the operation parameter is not empty, then updating the current behavior safety baseline state to an activation state; and / or, If the timer triggering information indicates that the timer is triggered, the current behavior safety baseline state is updated to a waiting end state.

6. The behavioral safety baseline state control method according to claim 1 is characterized in that: When the current behavioral safety baseline state is a waiting-to-start state, the method further includes: If the operation mode is an update mode, the current behavioral safety baseline state is maintained in a waiting-to-start state; If the type of the first behavioral safety baseline is an automatic learning type, setting the activation behavioral safety baseline parameter to the identifier of the first behavioral safety baseline; and / or, If the type of the first behavioral security baseline is a user-edited type, the waiting-to-start behavioral security baseline parameter included in the operation parameters is set to the identifier of the first behavioral security baseline, and the trigger time of the timer is set to the effective time of the first behavioral security baseline; the waiting-to-start behavioral security baseline parameter indicates that the behavioral security baseline to be started is a user-edited type.

7. The behavioral safety baseline state control method according to claim 1 is characterized in that: When the current behavioral safety baseline state is in the waiting end state, updating the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information includes: If the operation mode is an update mode, and the type of the first behavioral safety baseline is a user edit type, then the current behavioral safety baseline state is updated to a waiting start state; and / or, If the operation mode is a deletion mode, and the activation behavior safety baseline parameter included in the operation parameter is empty, then the current behavior safety baseline state is updated to an initial state; and / or, If the operation mode is the deletion mode and the activation behavior safety baseline parameter is not empty, then the current behavior safety baseline state is updated to the activation state; and / or, If the timer triggering information indicates that the timer is triggered and the activation behavior safety baseline parameter is empty, then updating the current behavior safety baseline state to waiting for the next behavior safety baseline state; and / or, If the timer triggering information indicates that a timer is triggered and the activated behavior safety baseline parameter is not empty, the current behavior safety baseline state is updated to an activated state.

8. The behavioral safety baseline state control method according to claim 1 is characterized in that: When the current behavioral safety baseline state is a waiting end state, the method further includes: If the operation mode is an update mode and the type of the first behavioral safety baseline is an automatic learning type, the current behavioral safety baseline state is maintained in a waiting end state, and the activation behavioral safety baseline parameter is set to the identifier of the first behavioral safety baseline.

9. The behavioral safety baseline state control method according to claim 1 is characterized in that: When the current behavioral safety baseline state is waiting for the next behavioral safety baseline state, updating the current behavioral safety baseline state according to the current behavioral safety baseline state, the operation mode, and the target information includes: If the operation mode is an update mode, and the type of the first behavioral safety baseline is an automatic learning type, then updating the current behavioral safety baseline state to an activated state; and / or, If the operation mode is an update mode, and the type of the first behavioral safety baseline is a user edit type, then the current behavioral safety baseline state is updated to a waiting start state; and / or, If the operation mode is a deletion mode and the first behavioral safety baseline is deleted successfully, the current behavioral safety baseline state is updated to an initial state.

10. The behavioral safety baseline state control method according to claim 1, characterized in that: When the current behavioral safety baseline state is waiting for the next behavioral safety baseline state, the method further includes: If the operation mode is a deletion mode and the deletion of the first behavioral safety baseline fails, the current behavioral safety baseline state is maintained to wait for the next behavioral safety baseline state; and / or, If the timer triggering information indicates that a timer is triggered, the current behavior safety baseline state is maintained to wait for the next behavior safety baseline state.

11. The method for controlling behavioral safety baseline status according to any one of claims 1 to 10, characterized in that: The method further comprises: If the operation mode is a deletion mode, deleting the first behavior security baseline; and / or, If the operation mode is an update mode, a second behavioral security baseline to be updated is obtained according to the operation parameters, and the first behavioral security baseline is replaced by the second behavioral security baseline.

12. A device for implementing the behavioral safety baseline state control method according to any one of claims 1 to 11, characterized in that: include: An acquisition module, specifically configured to acquire operation parameters of the first behavioral security baseline; the operation parameters include an operation mode corresponding to the first behavioral security baseline; The processing module is specifically configured to update the current behavioral safety baseline state according to the current behavioral safety baseline state and the operation mode.

13. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the program, the steps of the behavioral safety baseline status control method as described in any one of claims 1 to 11 are implemented.

14. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the behavioral safety baseline status control method as described in any one of claims 1 to 11 are implemented.

15. A computer program product having executable instructions stored thereon, characterized in that: When the instruction is executed by the processor, the processor implements the steps of the behavioral safety baseline status management method as described in any one of claims 1 to 11.

Images