Network risk processing method and apparatus, device, and storage medium

By combining a stream computing engine with a pre-set risk database, the IP addresses of network attackers can be quickly and accurately identified, solving the problem of poor network risk identification in existing technologies and achieving efficient identification and alerting of network attacks.

WO2026138078A1PCT designated stage Publication Date: 2026-07-02SHANGHAI PARAVIEW SOFTWARE CO LTD

Patent Information

Authority / Receiving Office
WO · WO
Patent Type
Applications
Current Assignee / Owner
SHANGHAI PARAVIEW SOFTWARE CO LTD
Filing Date
2025-10-13
Publication Date
2026-07-02

AI Technical Summary

Technical Problem

In existing technologies, the identification of network risks is not effective, and it is difficult to quickly and accurately identify the IP address of network attackers.

Method used

The system uses a pre-defined job in the stream computing engine to obtain the IP addresses to be identified as risky from traffic packets. It then uses a pre-defined risk database and traffic packet information, combined with a time window mechanism, to identify the risky IP addresses and send alarm information.

Benefits of technology

It enables the rapid and accurate identification of risky IP addresses from massive request data, assisting users in identifying network attacks and improving the accuracy and efficiency of network risk identification.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN2025127315_02072026_PF_FP_ABST
    Figure CN2025127315_02072026_PF_FP_ABST
Patent Text Reader

Abstract

A network risk processing method and apparatus, a device, and a storage medium. The method comprises: capturing request data and, on the basis of the request data, generating a traffic message (S101); using a preset job in a flow computing engine, obtaining pending determination risk IP addresses from the traffic message (S102); on the basis of a matching result of a transcendental risk IP address and the pending determination risk IP addresses in a preset risk database and on the basis of information of a preset position of the traffic message, determining a risk IP address from the pending determination risk IP addresses (S103); on the basis of the risk IP address within a preset time window, sending alarm information (S104).
Need to check novelty before this filing date? Find Prior Art