The invention discloses an access anomaly
analysis method and
system based on multi-dimensional features and user behaviors, and relates to the technical field of dynamic access
anomaly detection, and the method comprises the steps: based on a dynamic
hypergraph structure, extracting high-order correlation features of the user behaviors through a multilayer
hypergraph convolutional network, and generating a high-order
feature matrix; based on the high-order
feature matrix, generating an authority approval threshold through a causal
reinforcement learning framework, constructing a user behavior causal graph to generate strategy network parameters, and storing the strategy network parameters to distributed nodes of a regional
data center; based on strategy network parameters stored by distributed nodes, security multi-party computing is adopted, cross-node collaborative optimization is carried out, and global defense strategy parameters are generated through a security aggregation
algorithm. According to the method, security multi-party computing is adopted, cross-node collaborative optimization is performed, and the global defense strategy parameters are generated in combination with
homomorphic encryption and a block chain fragmentation technology, so that the
collaboration efficiency and strategy consistency among distributed nodes are improved on the premise of ensuring data privacy.