2 results about "Network attack" patented technology

The invention provides an abnormality detection method and device based on log graph modeling. The method and the device are applied to a nonsocial network. The method particularly includes: buildinga bipartite graph according to a key field of abnormal data annotated in advance in the nonsocial network, wherein left-side nodes of the bipartite graph correspond to multiple user accounts while right-side nodes of the same correspond to parameter combinations during business interface requesting; extracting features from the bipartite graph, and splicing the extracted features to form a featurevector; performing k-means cluster processing on the basis of the abnormal data and the feature vector to acquire optimal cluster number; according to the optimal cluster number, using a Gaussian mixing model to fit dark industry feature probability distribution; when receiving incoming data, calculating dark industry probability of the data according to feature vector of the incoming data and the Gaussian mixing model, and judging whether the data are abnormal or not according to the dark industry probability and the dark industry feature probability distribution. When the data are judged abnormal, access behaviors of users can be intervened timely, so that network attacks by hackers can be avoided.

The embodiment of the invention discloses a network attack determination method and system, electronic equipment and a storage medium. The method comprises the following steps: processing access data corresponding to each website based on a network attack detection model, and determining a classification result; if the classification result is an attack classification result, acquiring attack packet data and attack address information corresponding to the corresponding website; analyzing and processing the attack packet data and the attack address to determine the risk level of the website; and when the risk level is consistent with a preset risk level, determining a network attack and carrying out risk early warning. The problem that whether the network attack exists or not cannot be accurately judged in the prior art is solved, rapid detection of the network attack behavior is achieved, and the effect of improving the network security level is achieved.