The invention belongs to the technical field of
data processing, and particularly relates to a cloud
resource security access control method based on
big data processing, which comprises the following steps: S1, constructing a real-time behavior calculation engine; s2, establishing a multi-
modal risk assessment model; s3, generating and optimizing a self-adaptive strategy; according to the cloud
resource security access control method based on
big data processing,
millisecond-level behavior
data acquisition is realized by adopting Apache Flink, and a user-resource-behavior sequential relation network is constructed in combination with a Neo4j
graph database, so that the static role limitation of the traditional RBAC is broken through, for example, when it is detected that a certain account accesses non-common resources in non-working time, the user-resource-behavior sequential relation network is not influenced, and the user-resource-behavior sequential relation network is not influenced. The
system automatically triggers secondary
authentication, so that the safety is improved; secondly, constructing an access graph through a sliding window, and calculating a node centrality index, namely, when a certain user node is suddenly connected with a plurality of high-sensitivity resources, namely deviating from a baseline by more than 3 sigma, immediately marking as a potential transverse unauthorized
attack, thereby improving the intelligent level of identification and avoiding data leakage.