| 摘要 |
The invention discloses a malicious behavior blocking method and a device and solves problems that characteristic extraction efficiency and accuracy of malicious behaviors are low and the malicious behaviors can not be effectively blocked. The method comprises steps that, a test account number is pre-generated by monitoring equipment and is further registered on the monitoring equipment and service providing equipment, when an operation request sent by the test account number is received by the monitoring equipment, present sending characteristics are recorded as malicious characteristics, for to-be-determined behaviors, whether the to-be-determined behaviors are malicious behaviors is determined according to the recorded malicious characteristics, if yes, the to-be-determined behaviors are blocked, if not, the to-be-determined behaviors are released. Through the method, characteristics of the malicious behaviors can be acquired without no need to analyze large-scale historical data, so characteristic extraction efficiency of the malicious behaviors is improved, characteristic extraction accuracy is relatively high, the malicious behaviors can be effectively blocked, and determination miss and error determination can be avoided. |
