Business risk assessment method and device, and risk control system

Abstract

The invention provides a business risk assessment method and device, and a risk control system. The method comprises steps that to-be-assessed business data is received, and a risk behavior rule set matched with the business data is identified according to a preset risk rule engine; for multiple rules of the rule set, a risk value of each corresponding rule is assessed according to a pre-established risk assessment model; the risk values of the corresponding rules are accumulated, the accumulated risk value sum is compared with a total risk score threshold of each preset risk grade, and a risk grade of the business data is determined. The method is advantaged in that generalization capability and processing efficiency of a risk system can be improved.

Description

technical field [0001] The present invention relates to the technical field of the Internet, in particular to a business risk assessment method, device and risk control system. Background technique [0002] The risk control system is the business security risk control system, which aims to ensure the normal and safe operation of various businesses. see figure 1 , is a schematic diagram of a typical risk system architecture. The working process of the risk control system is: the business system transmits user access behavior data to the rule engine through the service access module, and the rule engine mainly depends on the security data warehouse and model strategy. The security data warehouse refers to the social engineering database (social engineering database), that is, malicious user information, including mobile phone number, IP, user name, etc.; model strategy mainly includes rules and strategies formulated by data analysts through data mining and other methods, and...

AI Technical Summary

Problems solved by technology

Therefore, for a malicious access, only the only rule that it hits can be obtained, but in fact, a malicious access will hit multiple rules at the same time, which makes it difficult to combine multiple rules for simultaneous judgment

[0006] (2) Low efficiency

[0007] Time-consuming and labor-intensive due to the need to manually set the priority of each rule

Because the risk levels of different rules are different, it is necessary to sort the rule sets according to their risk levels. It is hoped that the rules with higher risks can be hit in advance, but setting the risk levels of different rules requires manual experience. When the value is large, it is more complicated to set the risk level of each rule

Images