Behavior vector generation method and device, terminal and storage medium

Abstract

The embodiment of the invention discloses a behavior vector generation method and device, a terminal and a storage medium, and belongs to the information security field. The method comprises the stepsthat an operation record is acquired, wherein the operation record comprises behavior identifiers of at least one operation behavior generated in a target application; according to multiple preset groups, the at least one behavior identifier in the operation record is replaced with other behavior identifiers belonging to the same group, wherein the operation behaviors corresponding to the behavior identifiers in the same group have the association relation; and behavior vectors are generated according to the behavior identifiers obtained after the at least one behavior identifier is replaced.The generated behavior vectors can describe the operation behaviors generated in the target application to obtain an accurate application detection model through training, the operation behaviors ofa terminal user cannot be restored according to the behavior identifiers in the behavior vectors, therefore, the condition that the user privacy is leaked is avoided, and the security is improved.

Description

technical field [0001] Embodiments of the present invention relate to the field of information security, and in particular to a behavior vector generation method, device, terminal and storage medium. Background technique [0002] With the rapid development of Internet technology and the popularity of various applications, many malicious applications appear on the Internet. These malicious applications will perform malicious operations during operation and affect the information security of users. Therefore, how to accurately detect malicious applications has become an urgent problem to be solved in the field of information security. At present, an application detection method is proposed, which can detect according to the behavior vector corresponding to the operation behavior occurred in the application, so as to determine whether the application is a malicious application. [0003] One or more terminals generate operation records during the running of the application, and...

AI Technical Summary

Problems solved by technology

[0004] The behavior identifier in the above behavior vector corresponds to the operation behavior of the end user in the application. According to the behavior identifier in the behavior vector, the operation behavior of the end user can be restored, so there is a risk of leaking user privacy and poor security

Images