Movatterモバイル変換


[0]ホーム

URL:


CN114238036A - Method and device for monitoring abnormity of SAAS (software as a service) platform in real time - Google Patents

Method and device for monitoring abnormity of SAAS (software as a service) platform in real time
Download PDF

Info

Publication number
CN114238036A
CN114238036ACN202210164769.1ACN202210164769ACN114238036ACN 114238036 ACN114238036 ACN 114238036ACN 202210164769 ACN202210164769 ACN 202210164769ACN 114238036 ACN114238036 ACN 114238036A
Authority
CN
China
Prior art keywords
saas platform
abnormal
log
abnormal log
saas
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202210164769.1A
Other languages
Chinese (zh)
Inventor
江培荣
黄博
麻亮
刘鹏
王帅
张鹏
王雷雨
张旭林
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Chengdu Yunlitchi Technology Co ltd
Original Assignee
Chengdu Yunlitchi Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Chengdu Yunlitchi Technology Co ltdfiledCriticalChengdu Yunlitchi Technology Co ltd
Priority to CN202210164769.1ApriorityCriticalpatent/CN114238036A/en
Publication of CN114238036ApublicationCriticalpatent/CN114238036A/en
Pendinglegal-statusCriticalCurrent

Links

Images

Classifications

Landscapes

Abstract

The invention provides a method and a device for monitoring SAAS platform abnormity in real time, which output an abnormal log through a system, monitor abnormity in the abnormal log in real time, carry out graded early warning on the abnormity in the log, and can carry out monitoring on the abnormity in the SAAS platform in real time by various modes including short messages, mails, enterprise WeChat push, flybook push and the like, thereby ensuring the stability and robustness of the operation of the SAAS platform and being beneficial to further improving the user experience of SAAS application.

Description

Method and device for monitoring abnormity of SAAS (software as a service) platform in real time
Technical Field
The invention relates to the technical field of computers, in particular to a method and a device for monitoring SAAS platform abnormity in real time.
Background
Software As A Service (SAAS), also known as "on demand software", is a software delivery model. In the delivery mode, the software can be used only through a network without traditional installation steps, and the software and related data are centrally hosted in a cloud service. Users typically use thin clients, typically accessing software as a service via a web browser. The SAAS is most characterized in that the software itself is not downloaded to the hard disk of the user, but is stored in the cloud or server of the provider. Compared with the traditional software which needs to be purchased and downloaded with money, the software, namely the service, only needs the user to rent the software and is used online, so that the purchasing risk of the user is greatly reduced, the software does not need to be downloaded, and the limitation of equipment requirements is avoided.
SAAS is a software deployment model in which third party providers build applications on a cloud infrastructure and provide them to customers over the internet. This means that the software can be accessed from any device that has an internet connection and a web browser, not just on the local machine on which it is installed as conventional software.
The SAAS has many advantages over traditional software deployment, for example, the SAAS is faster than local software deployment, can run from any device all weather through internet browser, has no installation, device update or traditional license management, has no early hardware cost, easily expands solution, and for these reasons, more and more SAAS services are beginning to be accepted by large, medium and small sized customers, for example, Office365, Sharepoint, etc. provide SAAS services.
In order to further improve the user experience of the SAAS application, the SAAS platform abnormity is monitored in real time, and the SAAS resource allocation is adjusted according to the monitoring abnormity.
Disclosure of Invention
The technical scheme adopted by the invention is as follows:
a method for monitoring the abnormity of an SAAS platform in real time comprises the following steps:
according to the type of the SAAS platform abnormal log, carrying out data recording on the SAAS platform to obtain the SAAS platform abnormal log, and monitoring the abnormity by analyzing the abnormal log or dynamically monitoring the real-time use condition of the JVM by using a JVM plug-in;
the plug-in may be jvisualvm, and the abnormal condition of the SAAS platform is monitored in real time according to the use conditions of the memory, the hard disk and the like monitored by the JVM plug-in, specifically: configuring jvirusalvm in PATH environment variables, starting a jvirusalvm local process, entering a monitoring mode for monitoring the jvirusalvm or adding a connection port of the jvirusalvm in JVM starting parameters, starting a response port in a Server section, configuring authentication information in a configuration file, starting a monitoring panel of the jvirusalvm, and identifying conditions such as process ID, category information, CPU utilization rate, heap information, loader information, thread number and the like.
Specifically, the CPU occupied time can be positioned to the method by utilizing a CPU sampler in jvisualvm. It can be seen what the method currently occupies more CPU and how the thread occupies CPU time. The memory sampler can be used for seeing the occupation condition of the heap object of the current thread and the situation of the independent occupation of each thread.
And sending the abnormal detection result according to a predefined sending mode.
As a further improvement of the method for monitoring the SAAS platform anomaly in real time, the SAAS platform anomaly log includes a program anomaly log, and when the SAAS platform anomaly log to be recorded is the program anomaly log, the method performs data recording on the SAAS platform according to the type of the SAAS platform anomaly log to obtain the SAAS platform anomaly log, and the step specifically includes:
and recording the system abnormal log through an abnormal log recording tool according to a predefined output specification to obtain a program abnormal log or automatically outputting an abnormal monitoring file through a JVM abnormal monitoring plug-in.
As a further improvement of the real-time monitoring method for the SAAS platform anomaly, the SAAS platform anomaly log includes a system anomaly log, and when the SAAS platform anomaly log to be recorded is the system anomaly log, the data recording is performed on the SAAS platform according to the type of the SAAS platform anomaly log to obtain the SAAS platform anomaly log, and the step specifically includes:
and recording the system abnormal log by adopting a corresponding script through an abnormal log recording tool to obtain the system abnormal log.
As a further improvement of the method for monitoring the SAAS platform anomaly in real time, the SAAS platform anomaly log includes an SAAS application anomaly log, and when the SAAS platform anomaly log to be recorded is the SAAS application anomaly log, the data recording is performed on the SAAS platform according to the type of the SAAS platform anomaly log to obtain the SAAS platform anomaly log, and the step specifically includes:
and outputting the SAAS application abnormal log to an abnormal log recording tool by adopting the script with the corresponding format to obtain the SAAS application abnormal log.
As a further improvement of the real-time monitoring method for the SAAS platform anomaly, the step of performing anomaly detection on the SAAS platform anomaly log to obtain an anomaly detection result specifically includes:
acquiring corresponding early warning conditions according to the SAAS platform abnormal logs;
judging whether the SAAS platform abnormal log meets an early warning condition, if so, judging that the abnormal detection result is abnormal; otherwise, the abnormal detection result is normal operation.
The method for judging whether the SAAS platform abnormal log meets the early warning condition comprises the following steps:
step1, presetting an abnormal entity set X and a weight set W (X), wherein X is an element in the set X, i.e. X is an abnormal entity, and w (X) is an element in the set W (X), i.e. w (X) is the weight of X;
step2, acquiring an abnormal log within a threshold T of a past period of time;
step3, identifying abnormal entities in the abnormal logs within the past time threshold T by using a named entity identification algorithm;
step4, counting the occurrence frequency of different abnormal entities in a past period T;
step5, obtaining entropy weights e (x) of different abnormal entities by using an entropy weight method according to the result obtained in Step 4;
step6, obtaining early warning weights m (x) = w (x) e (x) of different abnormal entities according to the results of Step1 and Step 5;
step7, normalizing the early warning weights of the different abnormal entities to obtain normalized early warning weights g (x) of the different entities;
step8, setting an early warning weight threshold tw and an early warning weight number threshold tc, if the number of abnormal entities corresponding to g (x) > tw exceeds tc, meeting an early warning condition, otherwise not meeting the early warning condition;
as a further improvement of the SAAS platform abnormity real-time monitoring method, the sending mode comprises short messages, mails, enterprise WeChat push and flybook push.
The other technical scheme adopted by the invention is as follows:
an abnormal real-time monitoring device for an SAAS platform comprises:
the data recording unit is used for carrying out data recording on the SAAS platform according to the type of the SAAS platform abnormal log to obtain the SAAS platform abnormal log;
the anomaly detection unit is used for carrying out anomaly detection on the SAAS platform anomaly log to obtain an anomaly detection result;
and the sending unit is used for sending the abnormity detection result according to a predefined sending mode.
As a further improvement of the apparatus for monitoring the SAAS platform anomaly in real time, the anomaly detection unit includes:
the condition acquisition unit is used for acquiring corresponding early warning conditions according to the SAAS platform abnormal logs;
the judging unit is used for judging whether the SAAS platform abnormal log meets the early warning condition or not, and if so, the abnormal detection result is abnormal; otherwise, the abnormal detection result is normal operation.
The method for judging whether the SAAS platform abnormal log meets the early warning condition comprises the following steps:
step1, presetting an abnormal entity set X and a weight set W (X), wherein X is an element in the set X, i.e. X is an abnormal entity, and w (X) is an element in the set W (X), i.e. w (X) is the weight of X;
step2, acquiring an abnormal log within a threshold T of a past period of time;
step3, identifying abnormal entities in the abnormal logs within the past time threshold T by using a named entity identification algorithm;
step4, counting the occurrence frequency of different abnormal entities in a past period T;
step5, obtaining entropy weights e (x) of different abnormal entities by using an entropy weight method according to the result obtained in Step 4;
step6, obtaining early warning weights m (x) = w (x) e (x) of different abnormal entities according to the results of Step1 and Step 5;
step7, normalizing the early warning weights of the different abnormal entities to obtain normalized early warning weights g (x) of the different entities;
step8, setting an early warning weight threshold tw and an early warning weight number threshold tc, if the number of abnormal entities corresponding to g (x) > tw exceeds tc, meeting an early warning condition, otherwise, not meeting the early warning condition.
Drawings
FIG. 1 is a flowchart illustrating the steps of a method for monitoring an SAAS platform for anomalies in real time according to the present invention.
Detailed Description
The following further describes embodiments of the present invention with reference to the accompanying drawings:
referring to fig. 1, the present embodiment provides a method for monitoring an abnormal condition of an SAAS platform in real time, including the following steps:
s1, according to the type of the SAAS platform abnormal log, carrying out data recording on the SAAS platform to obtain the SAAS platform abnormal log;
in this embodiment, the SAAS platform exception log specifically includes a program exception log, a system exception log, and an SAAS application exception log, and when data is recorded, the SAAS platform exception log needs to be recorded in a corresponding data recording manner according to different types of the SAAS platform exception logs.
S2, carrying out anomaly detection on the SAAS platform anomaly log to obtain an anomaly detection result;
in the embodiment, early warning conditions for different types of SAAS platform abnormal logs are preset, when the SAAS platform abnormal logs reach the early warning conditions, the SAAS platform reaches a risk control level and belongs to an abnormal condition, and an abnormal detection result is abnormal; if the SAAS platform abnormal log does not reach the early warning condition, the SAAS platform is indicated to be in normal operation, and the abnormal detection result is normal operation at the moment.
And S3, transmitting the abnormal detection result according to the predefined transmission mode.
The sending modes in the embodiment include short messages, mails, enterprise WeChat pushing, flybook pushing and the like, and after the abnormal detection result is obtained, the abnormal detection result can be sent to corresponding personnel through the predefined sending mode, so that the personnel can timely acquire the abnormal condition, and follow-up targeted processing measures can be conveniently made.
Further, as a preferred embodiment, the SAAS platform exception log in this embodiment includes a program exception log, and when the SAAS platform exception log to be recorded is the program exception log, the data recording is performed on the SAAS platform according to the type of the SAAS platform exception log to obtain the SAAS platform exception log, where the step is specifically:
and recording the system abnormal log through an abnormal log recording tool according to a predefined output specification to obtain a program abnormal log.
Further, as a preferred embodiment, the SAAS platform exception log in this embodiment includes a system exception log, and when the SAAS platform exception log to be recorded is the system exception log, the data recording is performed on the SAAS platform according to the type of the SAAS platform exception log to obtain the SAAS platform exception log, where the step is specifically:
and recording the system abnormal log by adopting a corresponding script through an abnormal log recording tool to obtain the system abnormal log.
Further, as a preferred embodiment, the SAAS platform exception log in this embodiment includes an SAAS application exception log, and when the SAAS platform exception log to be recorded is the SAAS application exception log, the data recording is performed on the SAAS platform according to the type of the SAAS platform exception log to obtain the SAAS platform exception log, where the step is specifically:
and outputting the SAAS application abnormal log to an abnormal log recording tool by adopting the script with the corresponding format to obtain the SAAS application abnormal log.
Further as a preferred embodiment, the performing abnormality detection on the SAAS platform abnormality log to obtain an abnormality detection result in this embodiment specifically includes:
s21, acquiring corresponding early warning conditions according to the SAAS platform abnormal logs;
s22, judging whether the SAAS platform abnormal log meets the early warning condition, if so, judging that the abnormal detection result is abnormal; otherwise, the abnormal detection result is normal operation;
the method for judging whether the SAAS platform abnormal log meets the early warning condition comprises the following steps:
step1, presetting an abnormal entity set X and a weight set W (X), wherein X is an element in the set X, i.e. X is an abnormal entity, and w (X) is an element in the set W (X), i.e. w (X) is the weight of X;
step2, acquiring an abnormal log within a threshold T of a past period of time;
step3, identifying abnormal entities in the abnormal logs within the past time threshold T by using a named entity identification algorithm;
step4, counting the occurrence frequency of different abnormal entities in a past period T;
step5, obtaining entropy weights e (x) of different abnormal entities by using an entropy weight method according to the result obtained in Step 4;
step6, obtaining early warning weights m (x) = w (x) e (x) of different abnormal entities according to the results of Step1 and Step 5;
step7, normalizing the early warning weights of the different abnormal entities to obtain normalized early warning weights g (x) of the different entities;
step8, setting an early warning weight threshold tw and an early warning weight number threshold tc, if the number of abnormal entities corresponding to g (x) > tw exceeds tc, meeting an early warning condition, otherwise not meeting the early warning condition;
in this embodiment, the set early warning conditions are different for different types of SAAS platform abnormal logs, and when the time in the SAAS platform abnormal log is detected to reach the early warning conditions, an abnormal detection result is obtained as abnormal, and a subsequent notification is sent.
The embodiment provides an abnormal real-time monitoring device for an SAAS platform, which includes:
the data recording unit is used for carrying out data recording on the SAAS platform according to the type of the SAAS platform abnormal log to obtain the SAAS platform abnormal log;
the anomaly detection unit is used for carrying out anomaly detection on the SAAS platform anomaly log to obtain an anomaly detection result;
and the sending unit is used for sending the abnormity detection result according to a predefined sending mode.
The contents in the above method embodiments are all applicable to the present system embodiment, the functions specifically implemented by the present system embodiment are the same as those in the above method embodiment, and the beneficial effects achieved by the present system embodiment are also the same as those achieved by the above method embodiment.
Further preferably, the abnormality detection unit includes:
the condition acquisition unit is used for acquiring corresponding early warning conditions according to the SAAS platform abnormal logs;
the judging unit is used for judging whether the SAAS platform abnormal log meets the early warning condition or not, and if so, the abnormal detection result is abnormal; otherwise, the abnormal detection result is normal operation;
the method for judging whether the SAAS platform abnormal log meets the early warning condition comprises the following steps:
step1, presetting an abnormal entity set X and a weight set W (X), wherein X is an element in the set X, i.e. X is an abnormal entity, and w (X) is an element in the set W (X), i.e. w (X) is the weight of X;
step2, acquiring an abnormal log within a threshold T of a past period of time;
step3, identifying abnormal entities in the abnormal logs within the past time threshold T by using a named entity identification algorithm;
step4, counting the occurrence frequency of different abnormal entities in a past period T;
step5, obtaining entropy weights e (x) of different abnormal entities by using an entropy weight method according to the result obtained in Step 4;
step6, obtaining early warning weights m (x) = w (x) e (x) of different abnormal entities according to the results of Step1 and Step 5;
step7, normalizing the early warning weights of the different abnormal entities to obtain normalized early warning weights g (x) of the different entities;
step8, setting an early warning weight threshold tw and an early warning weight number threshold tc, if the number of abnormal entities corresponding to g (x) > tw exceeds tc, meeting an early warning condition, otherwise, not meeting the early warning condition.
The embodiment further provides an apparatus for monitoring an abnormal condition of an SAAS platform in real time, which specifically includes:
a memory for storing a program;
and the processor is used for executing the program, and the program enables the processor to execute the SAAS platform abnormity real-time monitoring method.
The contents in the above method embodiments are all applicable to the present apparatus embodiment, the functions specifically implemented by the present apparatus embodiment are the same as those in the above method embodiments, and the advantageous effects achieved by the present apparatus embodiment are also the same as those achieved by the above method embodiments.
The present embodiment also provides a computer-readable storage medium, which includes a computer program, when running on a computer, for causing the method for monitoring SAAS platform anomalies in real time to be performed.
The contents in the above method embodiments are all applicable to the present storage medium embodiment, the functions specifically implemented by the present storage medium embodiment are the same as those in the above method embodiments, and the advantageous effects achieved by the present storage medium embodiment are also the same as those achieved by the above method embodiments.
From the above, the method and the device for monitoring the SAAS platform abnormity in real time provided by the invention can rapidly detect the abnormity condition of the SAAS platform and send out a notification through analyzing the SAAS platform abnormity log, so that a developer can timely acquire the abnormity condition and conveniently make subsequent targeted processing measures.
While the invention has been described with reference to a preferred embodiment, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention.

Claims (7)

CN202210164769.1A2022-02-232022-02-23Method and device for monitoring abnormity of SAAS (software as a service) platform in real timePendingCN114238036A (en)

Priority Applications (1)

Application NumberPriority DateFiling DateTitle
CN202210164769.1ACN114238036A (en)2022-02-232022-02-23Method and device for monitoring abnormity of SAAS (software as a service) platform in real time

Applications Claiming Priority (1)

Application NumberPriority DateFiling DateTitle
CN202210164769.1ACN114238036A (en)2022-02-232022-02-23Method and device for monitoring abnormity of SAAS (software as a service) platform in real time

Publications (1)

Publication NumberPublication Date
CN114238036Atrue CN114238036A (en)2022-03-25

Family

ID=80747813

Family Applications (1)

Application NumberTitlePriority DateFiling Date
CN202210164769.1APendingCN114238036A (en)2022-02-232022-02-23Method and device for monitoring abnormity of SAAS (software as a service) platform in real time

Country Status (1)

CountryLink
CN (1)CN114238036A (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN114706709A (en)*2022-06-012022-07-05成都运荔枝科技有限公司Saas service exception handling method and device and readable storage medium
CN116074125A (en)*2023-03-272023-05-05成都运荔枝科技有限公司 An end-to-end cryptographic middle-end zero-trust security gateway system

Citations (3)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
WO2017215322A1 (en)*2016-06-132017-12-21Beijing Didi Infinity Technology And Development Co., Ltd.Systems and methods for recommending recommended service location
CN110398927A (en)*2019-09-032019-11-01中科同昌信息安全技术股份有限公司 An integrated data information monitoring platform and monitoring system
CN113608507A (en)*2021-07-132021-11-05大唐互联科技(武汉)有限公司Industrial internet yield real-time monitoring system and method based on SaaS (software as a service) level

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
WO2017215322A1 (en)*2016-06-132017-12-21Beijing Didi Infinity Technology And Development Co., Ltd.Systems and methods for recommending recommended service location
US20180189918A1 (en)*2016-06-132018-07-05Beijing Didi Infinity Technology And Development Co., Ltd.Systems and methods for recommending recommended service location
CN110398927A (en)*2019-09-032019-11-01中科同昌信息安全技术股份有限公司 An integrated data information monitoring platform and monitoring system
CN113608507A (en)*2021-07-132021-11-05大唐互联科技(武汉)有限公司Industrial internet yield real-time monitoring system and method based on SaaS (software as a service) level

Non-Patent Citations (4)

* Cited by examiner, † Cited by third party
Title
CDK: "Java性能监控和故障诊断可视化工具之二:jvisualvm", 《HTTPS://MP.WEIXIN.QQ.COM/S/WGIWJXXPK3WKC4JQR3LDTG》*
储进: "基于SaaS的监控系统的设计与实现", 《中国优秀硕士学位论文全文数据库 信息科技辑》*
卢立蕾: "云计算环境中SaaS服务可信性评价研究", 《中国博士学位论文全文数据库 信息科技辑》*
王蕊: "基于日志的SaaS软件运行时性能问题的识别与诊断方法", 《中国博士学位论文全文数据库 信息科技辑》*

Cited By (3)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN114706709A (en)*2022-06-012022-07-05成都运荔枝科技有限公司Saas service exception handling method and device and readable storage medium
CN116074125A (en)*2023-03-272023-05-05成都运荔枝科技有限公司 An end-to-end cryptographic middle-end zero-trust security gateway system
CN116074125B (en)*2023-03-272023-05-30成都运荔枝科技有限公司End-to-end password middle station zero trust security gateway system

Similar Documents

PublicationPublication DateTitle
US11245713B2 (en)Enrichment and analysis of cybersecurity threat intelligence and orchestrating application of threat intelligence to selected network security events
US11271955B2 (en)Platform and method for retroactive reclassification employing a cybersecurity-based global data store
CN113489713B (en)Network attack detection method, device, equipment and storage medium
CN109543891B (en)Method and apparatus for establishing capacity prediction model, and computer-readable storage medium
US20130276124A1 (en)Systems, methods, apparatuses and computer program products for providing mobile device protection
CN110149298B (en)Hijacking detection method and device
US20160224400A1 (en)Automatic root cause analysis for distributed business transaction
CN112163198B (en)Host login security detection method, system, device and storage medium
CN114238036A (en)Method and device for monitoring abnormity of SAAS (software as a service) platform in real time
CN106874135A (en)Method, device and equipment for detecting computer room failure
CN115204733A (en)Data auditing method and device, electronic equipment and storage medium
CN110727563A (en)Cloud service alarm method and device for preset customer
CN117675404A (en)Abnormality detection method and device for access behaviors, electronic equipment and storage medium
CN108650123B (en)Fault information recording method, device, equipment and storage medium
CN115190008B (en)Fault processing method, fault processing device, electronic equipment and storage medium
CN116701129A (en)Alarm information processing method, device, equipment and storage medium
CN110955890B (en)Method and device for detecting malicious batch access behaviors and computer storage medium
CN115525897A (en)System detection method and device for terminal equipment, electronic device and storage medium
CN112650180B (en)Safety warning method, device, terminal equipment and storage medium
CN118784524A (en) Domain name availability detection method, system, electronic device and storage medium
CN117714287A (en) Information display method for content distribution network
CN114024867B (en)Network anomaly detection method and device
CN113450149B (en)Information processing method, device, electronic equipment and computer readable medium
CN117112358A (en)Monitoring method, device, equipment, medium and program product
CN114676020A (en)Performance monitoring method and device of cache system, electronic equipment and storage medium

Legal Events

DateCodeTitleDescription
PB01Publication
PB01Publication
SE01Entry into force of request for substantive examination
SE01Entry into force of request for substantive examination
RJ01Rejection of invention patent application after publication

Application publication date:20220325

RJ01Rejection of invention patent application after publication

[8]ページ先頭

©2009-2025 Movatter.jp