Data access exception monitoring method and device

Abstract

The invention provides an exception monitoring method and device for data access and a storage medium. The method comprises the steps of receiving a data access request for a target employee, whereinthe data access request is used for requesting to access target resource data corresponding to a target service in an enterprise management system; based on the data access request, access informationincluding an access permission bit is determined, and the access permission bit is used for identifying an access permission corresponding to the target resource data; predicting a job role of the target employee through a role classification model based on the access information; obtaining a job role of the target employee in the enterprise management system; matching the predicted job role withthe job role of the target employee in the enterprise management system to obtain a matching result; and when the matching result represents that the predicted job role is different from the job roleof the target employee in the enterprise management system, returning prompt information of refusing the data access request. According to the invention, the accuracy of exception monitoring of dataaccess can be improved.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a data access abnormality monitoring method and device. Background technique [0002] With the rapid development of Internet technology, network applications such as enterprise management systems are playing an increasingly important role in work. Since network application services involve the core data of enterprises, their safe and stable operation is very important; at the same time, for Network application attacks continue to emerge, such as hacker intrusion, virus and Trojan horse, etc. In order to protect the core data and property security of enterprises, anomaly monitoring has become an important and urgent issue in the field of network security. [0003] In related technologies, based on the analysis of the daily general operation logs of the enterprise, the model training is carried out on the daily behavior of employees. However, the model trained by this ...

AI Technical Summary

Problems solved by technology

[0003] In related technologies, based on the analysis of the daily general operation logs of the enterprise, the model training is carried out on the daily behavior of employees. However, the model trained by this method is often effective in the management of flat employees; For companies with fine divisions, the model effect and versatility are poor, resulting in the need for further improvement in the accuracy of anomaly monitoring

Images