The embodiment of the invention provides an equipment behavior
analysis method and device,
processing equipment, a program product and a medium, and is applied to the technical field of
network security. The method comprises the following steps: acquiring behavior data and a historical
trust score of target equipment; according to the behavior data, determining a feature
score of at least one feature of the target device, the feature
score being used for reflecting a behavior
abnormality degree of the target device at the first moment; according to the historical
trust score, determining a
mutual information value corresponding to each feature, the
mutual information value being a value of
mutual information between the feature and the historical
trust score; adjusting the weight of each feature according to the mutual
information value corresponding to each feature; and according to the feature
score of the at least one feature and the weight of each feature, determining a trust score of the target device, the trust score being used for quantitatively evaluating the credibility and
security level of the target device in the network. By the adoption of the method, the problem that an existing 5G
private network security authentication mechanism is insufficient in security protection in a dynamically changing network environment is solved.