Method for generating unexpected pattern, method for determining whether users have malicious behaviors or not and computing device

Abstract

The invention discloses a method for generating an unexpected pattern. The method comprises the steps that user data of a plurality of users is obtained; according to the obtained user data, a user relationship diagram is built; in the built user relationship diagram, at least one kind of associated features of each personnel node are extracted according to each personnel node and the attribute values of the other nodes which are connected with the personnel node through sides; for each kind of associated features, the exception reference value of the associated features is computed according to the associated features marked as the associated features of the personnel node without malicious behaviors; according to the associated features marked as the associated features of the personnel node without malicious behaviors, the non-exception reference value of the associated features is computed; according to the computed exception reference value and the computed non-exception reference value of the at least one kind of associated features, the unexpected pattern is generated. The invention further discloses a method for determining whether users have the malicious behaviors, and a corresponding computing device and a computer readable storage medium.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method and a computing device for generating an abnormal pattern and determining whether a user has malicious behavior. Background technique [0002] With the rapid development of network communication technology, the continuous deepening of Internet applications, and the increasingly rich information carried, the Internet has become an important infrastructure of human society. At the same time, network security problems are becoming more and more serious. Among them, malicious network behaviors such as network fraud are gradually becoming an important criminal method that endangers the safety of public property. [0003] At present, the main way to manage such malicious behavior is to use anomaly patterns to detect based on the basic information of users. Anomaly patterns usually include the conditions met by users with malicious behaviors. Basic information can ...

AI Technical Summary

Problems solved by technology

However, since the basic personal information of users is relatively easy to forge, and the information of each user is largely isolated and lacks relevant information with other information, the detection accuracy of network anomalies is not high, and there are many cases of false detection and missed detection.

In addition, the content of abnormal patterns is relatively single, the accuracy of detection is not high, and most of them are manually configured, which increases the cost

Images