The invention relates to the technical field of
network security, discloses an abnormal digital
certificate automatic revoking method and device based on a CT log,
electronic equipment, a readable storage medium and a program product, and is used for solving the technical problem that in the prior art, an abnormal digital
certificate cannot be detected in time, so that the security risk is relatively high during website access or identity
verification. The method comprises the following steps: acquiring CT logs from a plurality of CT log servers, and screening out a new
certificate signing and issuing
record related to a target
domain name from the acquired CT logs; performing multi-dimensional
anomaly detection on the newly added certificate signing and issuing
record based on a fusion detection
algorithm, and judging whether an abnormal certificate signing and issuing
record is included or not by combining a multi-dimensional
anomaly detection result; and when detecting that the abnormal certificate issuing record exists, submitting a certificate revoking request to the CA corresponding to the abnormal certificate issuing record, and revoking the digital certificate corresponding to the abnormal certificate issuing record. According to the method, the abnormal digital certificate can be timely identified and revoked.