A rule loading method and device, a storage medium and an electronic device
By comparing rule information and loading target rule entries, the problem of long rule base update time is solved, and efficient rule loading is achieved.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- BEIJING TOPSEC NETWORK SECURITY TECH
- Filing Date
- 2022-12-20
- Publication Date
- 2026-07-14
AI Technical Summary
In existing technologies, updating the rule base takes a long time and has low loading efficiency.
By comparing the first rule information with the second rule information, the target rule entry is loaded based on the comparison result, including modifying, adding or deleting the corresponding rule entry, thereby shortening the loading time.
This significantly shortens the rule base loading time and improves loading efficiency.
Smart Images
Figure CN116015832B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of network security technology for electronic devices, and in particular to a rule loading method, apparatus, storage medium, and electronic device. Background Technology
[0002] With the development of internet information technology, the number of websites on the internet is increasing, and network attacks are becoming increasingly difficult to prevent, making network security protection particularly important. Currently, the main method of website protection is to deploy and use application firewalls. The core protection function of application firewalls is mainly implemented by their rule bases. In order to cope with the increasingly complex and ever-changing network security protection situation, the rule bases are being updated more and more frequently.
[0003] Currently, the rule base is updated by transmitting the new rule base to the electronic device, which then reloads all the rule entries in the new rule base. However, because the rule base contains many rule entries, and each new rule base only updates a portion of them, the loading process for the new rule base is time-consuming, resulting in low loading efficiency. Summary of the Invention
[0004] In view of this, the purpose of this application is to provide a rule loading method, apparatus, storage medium and electronic device to solve the problems of long loading time and low loading efficiency when loading a new rule base in the prior art.
[0005] In a first aspect, embodiments of this application provide a rule loading method applied to an electronic device, the rule loading method comprising:
[0006] Obtain the first rule information;
[0007] The first rule information is compared with the second rule information to obtain a comparison result. The second rule information is rule information stored on the electronic device. Both the first rule information and the second rule information include multiple rule entries.
[0008] Based on the identification information included in the comparison results, load the target rule entries included in the comparison results.
[0009] In one possible implementation, obtaining the first rule information includes:
[0010] Receive update command;
[0011] The first rule information is obtained from the server side or cloud system side based on the update instruction; or
[0012] Receive the first rule information sent by the server side or the cloud system side.
[0013] In one possible implementation, comparing the first rule information with the second rule information to obtain a comparison result includes:
[0014] Extract the identity code from the first rule information and / or the second rule information;
[0015] The comparison result is determined based on at least one rule entry corresponding to each of the identity codes.
[0016] In one possible implementation, determining the comparison result based on at least one rule entry corresponding to the identity code includes:
[0017] The first identification code, the second identification code, and the third identification code are determined;
[0018] The comparison result is determined based on the first rule entry and the second rule entry corresponding to the first identity code, the first rule entry corresponding to the second identity code, and the second rule entry corresponding to the third identity code.
[0019] The first identity identifier is an identity identifier that belongs to both the first rule information and the second rule information. The second identity identifier is an identity identifier that belongs to the first rule information but not to the second rule information. The third identity identifier is an identity identifier that does not belong to the first rule information but belongs to the second rule information.
[0020] In one possible implementation, determining the comparison result based on the first rule entry and second rule entry corresponding to the first identity code, the first rule entry corresponding to the second identity code, and the second rule entry corresponding to the third identity code includes:
[0021] By comparing the first rule entry and the second rule entry corresponding to the first identity code, a sub-rule entry that meets the preset conditions is determined, wherein the preset conditions are that it belongs to the first rule entry and does not belong to the second rule entry;
[0022] The comparison result is obtained by marking the sub-rule entries with a first identifier, marking the first rule entries corresponding to the second identity code with a second identifier, and marking the second rule entries corresponding to the third identity code with a third identifier.
[0023] In one possible implementation, the first identifier representation is modified, the second identifier representation is added, and the third identifier representation is deleted.
[0024] In one possible implementation, the rule loading method further includes:
[0025] The first rule information is used to overwrite the second rule information.
[0026] Secondly, embodiments of this application also provide a rule loading device, comprising:
[0027] The acquisition module is configured to acquire the first rule information;
[0028] The comparison module is configured to compare the first rule information with the second rule information to obtain a comparison result, wherein the second rule information is rule information stored on an electronic device, and both the first rule information and the second rule information include multiple rule entries;
[0029] The loading module is configured to load the target rule entries included in the comparison results according to the identification information included in the comparison results.
[0030] Thirdly, embodiments of this application also provide a storage medium in which the computer program is executed by a processor to perform the steps of the rule loading method as described in any of the above.
[0031] Fourthly, embodiments of this application also provide an electronic device, comprising: a processor and a memory, wherein the memory stores machine-readable instructions executable by the processor, and when the electronic device is running, the processor communicates with the memory via a bus, and when the machine-readable instructions are executed by the processor, the steps of the rule loading method as described in any of the above are performed.
[0032] The embodiments of this application load target rule entries according to the comparison results obtained by comparing the first rule information and the second rule information, so as to achieve the purpose of loading a new rule base, which greatly shortens the loading time and improves loading efficiency.
[0033] To make the above-mentioned objectives, features and advantages of this application more apparent and understandable, preferred embodiments are described below in detail with reference to the accompanying drawings. Attached Figure Description
[0034] To more clearly illustrate the technical solutions in this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0035] Figure 1 A flowchart of a rule loading method provided in this application is shown;
[0036] Figure 2 This application provides a flowchart illustrating the comparison results obtained during rule loading.
[0037] Figure 3 A schematic diagram of the structure of a rule loading device provided in this application is shown;
[0038] Figure 4 A schematic diagram of the structure of an electronic device provided in this application is shown. Detailed Implementation
[0039] Various embodiments and features of this application are described herein with reference to the accompanying drawings.
[0040] It should be understood that various modifications can be made to the embodiments described herein. Therefore, the above description should not be considered as limiting, but merely as an example of embodiments. Other modifications within the scope and spirit of this application will be apparent to those skilled in the art.
[0041] The accompanying drawings, which are included in and form part of this specification, illustrate embodiments of the present application and, together with the general description of the present application given above and the detailed description of the embodiments given below, serve to explain the principles of the present application.
[0042] These and other features of this application will become apparent from the following description of preferred forms of embodiments given as non-limiting examples, with reference to the accompanying drawings.
[0043] It should also be understood that although this application has been described with reference to some specific examples, those skilled in the art can certainly implement many other equivalent forms of this application, which have the features described in the claims and are therefore all within the scope of protection defined herein.
[0044] The above and other aspects, features and advantages of this application will become more apparent when taken in conjunction with the accompanying drawings and in view of the following detailed description.
[0045] Specific embodiments of this application are described thereafter with reference to the accompanying drawings; however, it should be understood that the claimed embodiments are merely examples of this application, which can be implemented in various ways. Well-known and / or repeated functions and structures are not described in detail to avoid unnecessary or redundant details that could obscure the application. Therefore, the specific structural and functional details claimed herein are not intended to be limiting, but merely serve as the basis and representative basis for the claims to teach those skilled in the art to use this application in a variety of substantially any suitable detailed structures.
[0046] This specification may use the phrases “in one embodiment,” “in another embodiment,” “in yet another embodiment,” or “in other embodiments,” all of which may refer to one or more of the same or different embodiments according to this application.
[0047] Firstly, to facilitate understanding of this application, a rule loading method provided in this application will be described in detail.
[0048] like Figure 1 The diagram shows a rule loading method provided in an embodiment of this application, according to... Figure 1 The method shown solves the problems of long loading time and low loading efficiency when loading new rule bases in the prior art. Specific steps include S101-S103.
[0049] S101, Obtain the first rule information.
[0050] In practice, this rule loading method is applied to electronic devices, which then deploy and use application firewalls based on the configured rule information, thereby ensuring the security of the electronic devices.
[0051] Here, electronic devices can acquire the first rule information in real time in the following two ways. The first way is to receive an update instruction in real time. This update instruction is generated after the user, maintenance personnel, or manufacturer of the electronic device performs a preset operation, thereby causing the electronic device to respond to the update instruction. Then, based on the update instruction, the first rule information is acquired from the server side or cloud system side. For example, a rule update request is generated and sent to the server side or cloud system side so that the server side or cloud system side returns the first rule information to the electronic device.
[0052] The second method is to receive the first rule information sent by the server side or cloud system side in real time. That is, as long as the first rule information exists on the server side or cloud system side, the first rule information will be sent to the electronic device.
[0053] This application does not specifically limit the method of obtaining the first rule information, as long as the rule base or the rule entries in the rule base can be updated in a timely manner.
[0054] S102, compare the first rule information with the second rule information to obtain the comparison result, wherein the second rule information is rule information stored on the electronic device, and both the first rule information and the second rule information include multiple rule entries.
[0055] After obtaining the first rule information, the first rule information is compared with the second rule information to obtain the comparison result. Optionally, according to... Figure 2The flowchart shown is used to obtain comparison results, and the specific steps include S201 and S202.
[0056] S201, Extract the identity code from the first rule information and / or the second rule information.
[0057] S202, determine the comparison result based on at least one rule entry corresponding to each of the identity codes.
[0058] In practice, both the first rule information and the second rule information include rule entries and an identification code corresponding to each rule entry. Furthermore, the identification code can be extracted from either the first rule information or the second rule information alone, or it can be extracted from both the first rule information and the second rule information separately.
[0059] After extracting the identity identification code, a first identity identification code, a second identity identification code, and a third identity identification code are determined. As one example, the identity identification code that belongs to both the first rule information and the second rule information is determined as the first identity identification code; the identity identification code that belongs to the first rule information but not to the second rule information is determined as the second identity identification code; and the identity identification code that does not belong to the first rule information but belongs to the second rule information is determined as the third identity identification code.
[0060] After determining the first identity code, the second identity code, and the third identity code, the comparison result is determined based on the first rule entry and the second rule entry corresponding to the first identity code, the first rule entry corresponding to the second identity code, and the second rule entry corresponding to the third identity code.
[0061] Considering that each rule entry may include multiple sub-rule entries, when determining the comparison result, the first rule entry and the second rule entry corresponding to the first identity code are compared to identify the sub-rule entries that meet preset conditions. The preset condition is that the sub-rule entry belongs to the first rule entry and not to the second rule entry. That is, by comparing the first rule entry and the second rule entry corresponding to the first identity code, sub-rule entries that are different from the second rule entry corresponding to the first identity code are obtained. Then, a first identifier is used to mark the sub-rule entries, which represents modification. In other words, the second rule entry corresponding to the first identity code is modified using the sub-rule entries obtained from the comparison. Of course, the first identifier can also carry the modification location, i.e., the storage location corresponding to the sub-rule entry.
[0062] Simultaneously, the first rule entry corresponding to the second identity code is marked using a second identifier. This second identifier indicates an addition, meaning that although the current second rule information does not contain a first rule entry corresponding to the second identity code, it needs to be added to the second rule information. At the same time, the second rule entry corresponding to the third identity code is marked using a third identifier. This third identifier indicates deletion, meaning that the first rule information does not contain a second rule entry corresponding to the third identity code, and in this case, the second rule entry corresponding to the third identity code needs to be deleted from the second rule information.
[0063] The comparison result is determined based on the marked sub-rule entries, the first rule entries corresponding to the second identity code, and the second rule entries corresponding to the third identity code.
[0064] S103, Load the target rule entries included in the comparison results according to the identification information included in the comparison results.
[0065] After obtaining the comparison results, the target rule entries included in the comparison results are loaded according to the identification information included in the comparison results. For example, if the identification information indicates modification, the sub-rule entry corresponding to the identification information is loaded to replace the rule entry at the corresponding position; if the identification information indicates addition, the first rule entry corresponding to the second identity code corresponding to the identification information is directly loaded so that the electronic device applies the first rule entry corresponding to the second identity code; if the identification information indicates deletion, the second rule entry corresponding to the third identity code already loaded in the electronic device is directly deleted so that the electronic device no longer applies the second rule entry corresponding to the third identity code.
[0066] As can be seen, in this embodiment, it is not necessary to load all the first rule information into the electronic device. Only some rule entries in the comparison results, such as sub-rule entries and the first rule entries corresponding to the second identity code, need to be loaded into the electronic device. Furthermore, by deleting the second rule entries corresponding to the third identity code that have already been loaded into the electronic device, the purpose of loading a new rule base is achieved, which greatly shortens the loading time and improves the loading efficiency.
[0067] Furthermore, after the new rule base is loaded, the first rule information is used to overwrite the second rule information in order to load the new rule base for the next time.
[0068] Based on the same inventive concept, the second aspect of this application also provides a rule loading device corresponding to the rule loading method. Since the principle of the rule loading device in this application is similar to that of the rule loading method described above, the implementation of the rule loading device can refer to the implementation of the method, and the repeated parts will not be described again.
[0069] Figure 3 A schematic diagram of the rule loading device provided in an embodiment of this application is shown, specifically including:
[0070] The acquisition module 301 is configured to acquire the first rule information;
[0071] The comparison module 302 is configured to compare the first rule information with the second rule information to obtain a comparison result, wherein the second rule information is rule information stored on an electronic device, and both the first rule information and the second rule information include multiple rule entries;
[0072] The loading module 303 is configured to load the target rule entries included in the comparison results according to the identification information included in the comparison results.
[0073] In yet another embodiment, the acquisition module 301 is specifically configured as follows:
[0074] Receive update command;
[0075] The first rule information is obtained from the server side or cloud system side based on the update instruction; or
[0076] Receive the first rule information sent by the server side or the cloud system side.
[0077] In yet another embodiment, the comparison module 302 is specifically configured as follows:
[0078] Extract the identity code from the first rule information and / or the second rule information;
[0079] The comparison result is determined based on at least one rule entry corresponding to each of the identity codes.
[0080] In yet another embodiment, the comparison module 302 is further configured as follows:
[0081] The first identification code, the second identification code, and the third identification code are determined;
[0082] The comparison result is determined based on the first rule entry and the second rule entry corresponding to the first identity code, the first rule entry corresponding to the second identity code, and the second rule entry corresponding to the third identity code.
[0083] The first identity identifier is an identity identifier that belongs to both the first rule information and the second rule information. The second identity identifier is an identity identifier that belongs to the first rule information but not to the second rule information. The third identity identifier is an identity identifier that does not belong to the first rule information but belongs to the second rule information.
[0084] In yet another embodiment, the comparison module 302 is further configured as follows:
[0085] By comparing the first rule entry and the second rule entry corresponding to the first identity code, a sub-rule entry that meets the preset conditions is determined, wherein the preset conditions are that it belongs to the first rule entry and does not belong to the second rule entry;
[0086] The comparison result is obtained by marking the sub-rule entries with a first identifier, marking the first rule entries corresponding to the second identity code with a second identifier, and marking the second rule entries corresponding to the third identity code with a third identifier.
[0087] In another embodiment, the first identifier is modified, the second identifier is added, and the third identifier is deleted.
[0088] In yet another embodiment, the rule loading device further includes an overlay module configured as follows:
[0089] The first rule information is used to overwrite the second rule information.
[0090] The embodiments of this application load target rule entries according to the comparison results obtained by comparing the first rule information and the second rule information, so as to achieve the purpose of loading a new rule base, which greatly shortens the loading time and improves loading efficiency.
[0091] This application provides a storage medium, which is a computer-readable medium, storing a computer program. When executed by a processor, the computer program implements the method provided in any embodiment of this application, including the following steps S11 to S13:
[0092] S11, Obtain the first rule information;
[0093] S12, compare the first rule information with the second rule information to obtain a comparison result, wherein the second rule information is rule information stored on the electronic device, and both the first rule information and the second rule information include multiple rule entries;
[0094] S13, Load the target rule entries included in the comparison results according to the identification information included in the comparison results.
[0095] When a computer program is executed by a processor to obtain the first rule information, the processor specifically performs the following steps: receiving an update instruction; obtaining the first rule information from the server side or the cloud system side based on the update instruction; or receiving the first rule information sent by the server side or the cloud system side.
[0096] When the computer program is executed by the processor to compare the first rule information with the second rule information and obtain the comparison result, the processor also performs the following steps: extracting the identity identification code from the first rule information and / or the second rule information; and determining the comparison result based on at least one rule entry corresponding to each identity identification code.
[0097] When a computer program is executed by a processor to determine the comparison result based on at least one rule entry corresponding to an identity code, the processor further performs the following steps: determining a first identity code, a second identity code, and a third identity code; determining the comparison result based on a first rule entry and a second rule entry corresponding to the first identity code, a first rule entry corresponding to the second identity code, and a second rule entry corresponding to the third identity code; wherein the first identity code is an identity code that simultaneously belongs to the first rule information and the second rule information, the second identity code is an identity code that belongs to the first rule information but not to the second rule information, and the third identity code is an identity code that does not belong to the first rule information but belongs to the second rule information.
[0098] When a computer program is executed by a processor to determine the comparison result based on the first rule entry and the second rule entry corresponding to the first identity code, the first rule entry corresponding to the second identity code, and the second rule entry corresponding to the third identity code, the processor further executes the following steps: comparing the first rule entry and the second rule entry corresponding to the first identity code to determine the sub-rule entry that meets a preset condition, wherein the preset condition is that it belongs to the first rule entry and does not belong to the second rule entry; marking the sub-rule entry with a first identifier, marking the first rule entry corresponding to the second identity code with a second identifier, and marking the second rule entry corresponding to the third identity code with a third identifier to obtain the comparison result.
[0099] When a computer program is executed by a processor using a rule loading method, the processor also performs the following steps: overwriting the second rule information with the first rule information.
[0100] The embodiments of this application load target rule entries according to the comparison results obtained by comparing the first rule information and the second rule information, so as to achieve the purpose of loading a new rule base, which greatly shortens the loading time and improves loading efficiency.
[0101] This application also provides an electronic device, the structural schematic diagram of which is shown below. Figure 4As shown, it includes at least a memory 401 and a processor 402. The memory 401 stores a computer program, and the processor 402 implements the method provided in any embodiment of this application when executing the computer program in the memory 401. Exemplarily, the steps of the electronic device computer program are as follows: S21 to S23:
[0102] S21, Obtain the first rule information;
[0103] S22, compare the first rule information with the second rule information to obtain a comparison result, wherein the second rule information is rule information stored on the electronic device, and both the first rule information and the second rule information include multiple rule entries;
[0104] S23, Load the target rule entries included in the comparison results according to the identification information included in the comparison results.
[0105] When the processor executes the acquisition of first rule information stored in memory, it also executes the following computer program: receiving an update instruction; acquiring the first rule information from the server side or the cloud system side based on the update instruction; or receiving the first rule information sent by the server side or the cloud system side.
[0106] When the processor compares the first rule information and the second rule information stored in the execution memory to obtain a comparison result, it also executes the following computer program: extracting an identity code from the first rule information and / or the second rule information; and determining the comparison result based on at least one rule entry corresponding to each identity code.
[0107] When the processor determines the comparison result based on at least one rule entry corresponding to an identity code stored in the execution memory, it further executes the following computer program: determining a first identity code, a second identity code, and a third identity code; determining the comparison result based on the first rule entry and the second rule entry corresponding to the first identity code, the first rule entry corresponding to the second identity code, and the second rule entry corresponding to the third identity code; wherein the first identity code is an identity code that simultaneously belongs to the first rule information and the second rule information, the second identity code is an identity code that belongs to the first rule information but not to the second rule information, and the third identity code is an identity code that does not belong to the first rule information but belongs to the second rule information.
[0108] When the processor determines the comparison result based on the first rule entry and the second rule entry corresponding to the first identity code, the first rule entry corresponding to the second identity code, and the second rule entry corresponding to the third identity code stored in the execution memory, it also executes the following computer program: comparing the first rule entry and the second rule entry corresponding to the first identity code to determine the sub-rule entry that meets the preset conditions, wherein the preset conditions are that it belongs to the first rule entry and does not belong to the second rule entry; marking the sub-rule entry with a first identifier, marking the first rule entry corresponding to the second identity code with a second identifier, and marking the second rule entry corresponding to the third identity code with a third identifier to obtain the comparison result.
[0109] When the processor executes the rule loading method stored in memory, it also executes the following computer program: overwriting the second rule information with the first rule information.
[0110] The embodiments of this application load target rule entries according to the comparison results obtained by comparing the first rule information and the second rule information, so as to achieve the purpose of loading a new rule base, which greatly shortens the loading time and improves loading efficiency.
[0111] Optionally, in this embodiment, the storage medium may include, but is not limited to, various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk. Optionally, in this embodiment, the processor executes the method steps described in the above embodiments according to the program code stored in the storage medium. Optionally, specific examples in this embodiment can refer to the examples described in the above embodiments and optional implementations, which will not be repeated here. Obviously, those skilled in the art should understand that the modules or steps of this application described above can be implemented using general-purpose computing devices. They can be centralized on a single computing device or distributed on a network of multiple computing devices. Optionally, they can be implemented using computer-executable program code, thereby storing them in a storage device for execution by a computing device. In some cases, the steps shown or described can be executed in a different order than those described here, or they can be fabricated as separate integrated circuit modules, or multiple modules or steps can be fabricated as a single integrated circuit module. Thus, this application is not limited to any specific hardware and software combination.
[0112] Furthermore, although exemplary embodiments have been described herein, their scope includes any and all embodiments based on this application that have equivalent elements, modifications, omissions, combinations (e.g., schemes involving intersections of various embodiments), adaptations, or alterations. Elements in the claims will be interpreted broadly based on the language used in the claims and are not limited to the examples described in this specification or during the implementation of this application, which will be interpreted as non-exclusive. Therefore, this specification and examples are intended to be considered illustrative only, and the true scope and spirit are indicated by the full scope of the following claims and their equivalents.
[0113] The above description is intended to be illustrative and not restrictive. For example, the above examples (or one or more of them) can be used in combination with each other. Other embodiments can be used by those skilled in the art when reading the above description. Furthermore, in the above detailed description, various features may be grouped together to simplify the application. This should not be construed as an intention that a disclosed feature not claimed is necessary for any claim. Rather, the subject matter of the application may be less than all the features of a particular disclosed embodiment. Thus, the following claims are incorporated herein by reference as examples or embodiments, wherein each claim is an independent, separate embodiment, and these embodiments are contemplated to be combined with each other in various combinations or arrangements. The scope of this application should be determined by reference to the appended claims and the full scope of their equivalents.
[0114] The foregoing has described in detail several embodiments of this application, but this application is not limited to these specific embodiments. Those skilled in the art can make various variations and modifications based on the concept of this application, and all such variations and modifications should fall within the scope of protection claimed in this application.
Claims
1. A rule loading method, characterized in that, The rule loading method, applied to electronic devices, includes: Obtain the first rule information; The first rule information is compared with the second rule information to obtain a comparison result. The second rule information is rule information stored on the electronic device. Both the first rule information and the second rule information include multiple rule entries. According to the identification information included in the comparison results, load the target rule entries included in the comparison results; in: The first rule information is compared with the second rule information to obtain the comparison result, including: Extract the identity identification code from the first rule information and / or the second rule information; A first identity code, a second identity code, and a third identity code are determined; the first rule entry and the second rule entry corresponding to the first identity code are compared to determine the sub-rule entry that meets the preset conditions; the sub-rule entry is marked with a first identifier, the first rule entry corresponding to the second identity code is marked with a second identifier, and the second rule entry corresponding to the third identity code is marked with a third identifier to obtain the comparison result; The preset condition is that it belongs to the first rule entry and does not belong to the second rule entry; The first identity identifier is an identity identifier that belongs to both the first rule information and the second rule information; the second identity identifier is an identity identifier that belongs to the first rule information but not to the second rule information; and the third identity identifier is an identity identifier that does not belong to the first rule information but belongs to the second rule information. The first identifier is modified, the second identifier is added, and the third identifier is deleted.
2. The rule loading method according to claim 1, characterized in that, The acquisition of the first rule information includes: Receive update command; The first rule information is obtained from the server side or cloud system side based on the update instruction; or Receive the first rule information sent by the server side or the cloud system side.
3. The rule loading method according to claim 1, characterized in that, Also includes: The first rule information is used to overwrite the second rule information.
4. A rule loading apparatus employing the method described in any one of claims 1 to 3, characterized in that, include: The acquisition module is configured to acquire the first rule information; The comparison module is configured to compare the first rule information with the second rule information to obtain a comparison result, wherein the second rule information is rule information stored on the electronic device, and both the first rule information and the second rule information include multiple rule entries; The loading module is configured to load the target rule entries included in the comparison results according to the identification information included in the comparison results.
5. A storage medium, characterized in that, The storage medium stores a computer program that, when executed by a processor, performs the steps of the rule loading method as described in any one of claims 1 to 3.
6. An electronic device, characterized in that, include: The electronic device includes a processor and a memory, the memory storing machine-readable instructions executable by the processor. When the electronic device is running, the processor communicates with the memory via a bus, and when the machine-readable instructions are executed by the processor, the steps of the rule loading method as described in any one of claims 1 to 3 are performed.