WHITELIST SELF-LEARNING METHOD AND DEVICE BASED ON MACHINE LEARNING TECHNOLOGY

摘要

The present disclosure relates to the technical field of network security and provides a whitelist self-learning method and device based on machine learning technology. The method comprises: aggregating the parameter values of each request parameter of multiple business requests to be learned, to obtain value sets corresponding to each of the request parameters; determining the parameter type of the request parameter based on the number of values, the value length, and the value format of each value set through machine learning technology; generating feature values of the parameter types of each of the request parameters, and performing security detection on a new business request based on the feature values. With the present disclosure, the WAF may quickly and efficiently filter out a large number of normal business requests before the conventional defense process, reducing the security protection burden of the WAF.