CN114792007A - Code detection method, device, equipment, storage medium and computer program product - Google Patents

Abstract

The present application relates to the technical field of information security, and provides a code detection method, device, computer equipment, storage medium and computer program product, which can be specifically applied to the financial field or other related fields. The present application can improve the accuracy and efficiency of code detection and reduce the cost of code detection. The method includes: acquiring a code to be detected and a transaction account composition rule, obtaining string length target information of the transaction account according to the transaction account composition rule, extracting each string in the code to be detected, and acquiring the string length corresponding to each string information, take the character string whose length information matches the target string length information as the character string to be judged, judge whether the character string to be judged conforms to the rules for forming transaction accounts, and determine whether the code to be detected contains an illegal transaction account according to the judgment result.

Description

Code detection method, apparatus, device, storage medium and computer program product

technical field

The present application relates to the technical field of information security, and in particular, to a code detection method, apparatus, computer equipment, storage medium and computer program product.

Background technique

With the development of information security technology, code detection is an important link in information security level protection work, and it is also one of the effective means to improve system security in the entire software life cycle. For example, in a system involving settlement and payment, if the program code is maliciously written into an illegal transaction account number (including transaction card number, transaction account number, etc.) by the programmer, when the program code is executed, the funds may be transferred to the corresponding account. The trading account will cause the loss of funds.

In the traditional technology, code detection is usually performed by manually detecting codes, but the efficiency of code detection by this technology is low.

SUMMARY OF THE INVENTION

Based on this, it is necessary to provide a code detection method, an apparatus, a computer device, a computer-readable storage medium and a computer program product for the above technical problems.

In a first aspect, the present application provides a code detection method. The method includes:

Obtain the code to be detected and the rules for the composition of the transaction account;

Obtain the string length target information of the transaction account according to the composition rules of the transaction account;

Extract each character string in the code to be detected, and obtain the character string length information corresponding to each character string;

The string whose length information matches the target string length information is used as the string to be judged;

Determine whether the string to be judged conforms to the rules for composition of the transaction account;

According to the judgment result, it is determined whether the code to be detected contains an illegal transaction account number.

In one embodiment, each character string in the code to be detected is extracted, including:

Perform syntax analysis and/or lexical analysis on the code to be detected, and extract each assignment statement contained in the code to be detected;

Extract each string contained in each assignment statement.

In one of the embodiments, judging whether the character string to be judged complies with the transaction account composition rules, including:

Judging whether each string to be judged matches the account information in the preset whitelist of trading accounts;

If not all matches, extract each non-matching character string to be judged in the character string to be judged;

It is judged whether each unmatched character string to be judged conforms to the transaction account composition rules.

In one embodiment, the method further includes:

If all match, it is determined that the code to be detected does not contain an illegal transaction account number.

In one embodiment, according to the judgment result, it is determined whether the code to be detected contains an illegal transaction account number, including:

According to the judgment result, calculate the risk value of the code to be tested;

Determine the risk threshold interval conditions that the value at risk meets;

If the risk threshold interval condition satisfied by the risk value is the first risk threshold interval condition, it is determined that the code to be detected does not contain an illegal transaction account number;

If the risk threshold interval condition satisfied by the risk value is the second risk threshold interval condition, it is determined that the code to be detected has the risk of including an illegal transaction account;

If the risk threshold interval condition satisfied by the risk value is the third risk threshold interval condition, it is determined that the code to be detected contains an illegal transaction account number;

Wherein, the first risk threshold interval condition is a risk interval less than or equal to the first risk threshold; the second risk threshold interval condition is a risk interval greater than the first risk threshold and less than or equal to the second risk threshold; the third risk threshold interval condition is the risk interval greater than the second risk threshold.

In one embodiment, the method further includes:

Obtain the real results of code samples and whether the code samples contain illegal trading accounts;

Use code samples and real results to train the risk threshold acquisition model to be trained, and obtain the trained risk threshold acquisition model;

The first risk threshold and the second risk threshold are obtained through the trained risk threshold obtaining model.

In one of the embodiments, acquiring transaction account composition rules, including:

Obtain the latest transaction account composition rules corresponding to each transaction account type according to a preset time period.

In a second aspect, the present application also provides a code detection device. The device includes:

The code acquisition module to be tested is used to obtain the composition rules of the code to be tested and the transaction account;

a string length target information acquisition module, configured to obtain the string length target information of the transaction account according to the transaction account composition rule;

a character string extraction module, used for extracting each character string in the code to be detected, and obtaining character string length information corresponding to each character string;

The character string to be judged is used as a module for taking the character string whose length information of the character string matches with the target information of the character string length as the character string to be judged;

A transaction account composition rule judgment module, configured to judge whether the character string to be judged conforms to the transaction account composition rule;

The illegal transaction account number determination module is used for determining whether the code to be detected contains an illegal transaction account number according to the judgment result.

In a third aspect, the present application also provides a computer device. The computer device includes a memory and a processor, the memory stores a computer program, and the processor implements the following steps when executing the computer program:

Obtain the composition rules of the code to be detected and the transaction account; obtain the string length target information of the transaction account according to the composition rules of the transaction account; extract each character string in the code to be detected, and obtain the string length information corresponding to each character string; The character string whose string length information matches the character string length target information is regarded as the character string to be judged; it is judged whether the character string to be judged conforms to the composition rule of the transaction account number; according to the judgment result, it is determined whether the code to be detected contains an illegal transaction account number.

In a fourth aspect, the present application also provides a computer-readable storage medium. The computer-readable storage medium has a computer program stored thereon, and when the computer program is executed by the processor, the following steps are implemented:

Obtain the composition rules of the code to be detected and the transaction account; obtain the string length target information of the transaction account according to the composition rules of the transaction account; extract each character string in the code to be detected, and obtain the string length information corresponding to each character string; The character string whose string length information matches the character string length target information is regarded as the character string to be judged; it is judged whether the character string to be judged conforms to the composition rule of the transaction account number; according to the judgment result, it is determined whether the code to be detected contains an illegal transaction account number.

In a fifth aspect, the present application also provides a computer program product. The computer program product includes a computer program that, when executed by a processor, implements the following steps:

Obtain the composition rules of the code to be detected and the transaction account; obtain the string length target information of the transaction account according to the composition rules of the transaction account; extract each character string in the code to be detected, and obtain the string length information corresponding to each character string; The character string whose string length information matches the character string length target information is regarded as the character string to be judged; it is judged whether the character string to be judged conforms to the composition rule of the transaction account number; according to the judgment result, it is determined whether the code to be detected contains an illegal transaction account number.

The above-mentioned code detection method, device, computer equipment, storage medium and computer program product, obtain the code to be detected and the composition rule of the transaction account, obtain the string length target information of the transaction account according to the composition rule of the transaction account, and extract each code in the code to be detected. string, and obtain the string length information corresponding to each character string, take the string whose length information matches the target string length information as the string to be judged, and judge whether the character string to be judged complies with the rules for the composition of the transaction account, according to the judgment As a result, it is determined whether the code to be detected contains an illegal transaction account number. The solution can obtain the latest transaction account composition rules corresponding to each transaction account type in advance, obtain the code to be detected, obtain the string length target information of the transaction account according to the transaction account composition rules, extract all strings in the code to be detected, and Obtain the string length information corresponding to all the strings, determine whether the string length information matches the string length target information, take the matched string as the string to be judged, and judge whether the string to be judged conforms to the rules for the composition of the transaction account. According to the judgment result, it is determined whether the code to be detected contains an illegal transaction account number, thereby improving the accuracy and efficiency of code detection and reducing the cost of code detection.

Description of drawings

1 is a schematic flowchart of a code detection method in one embodiment;

Fig. 2 is the application environment diagram of the code detection method in one embodiment;

3 is a schematic diagram of a software structure of a transaction account detection decision server in one embodiment;

4 is a schematic flowchart of a code detection method in another embodiment;

Fig. 5 is the structural block diagram of the code detection apparatus in one embodiment;

FIG. 6 is a diagram of the internal structure of a computer device in one embodiment.

Detailed ways

In order to make the purpose, technical solutions and advantages of the present application more clearly understood, the present application will be described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application, but not to limit the present application.

In one embodiment, as shown in FIG. 1, a code detection method is provided. This embodiment is illustrated by applying the method to a server or a terminal, including the following steps:

In step S101, a code to be detected and a transaction account composition rule are obtained.

In this step, as shown in Figure 2, the transaction account composition rules may be the latest transaction account composition rules corresponding to each transaction account type, and the transaction account composition rules include but are not limited to card BIN, card number length, area code location in the account, account number Length and other rules, in which transaction account types include but are not limited to card numbers, account numbers, and QR code account systems.

Specifically, as shown in Figure 2, Figure 3 and Figure 4, the server (may be referred to as the transaction account detection and decision server 01) obtains the latest transaction account composition rules corresponding to each transaction account type according to a preset time period, such as the receiving bank system The card and account number rules sent by the server 02, the card BIN rules sent by the card organization system server 03, and the transaction account composition rules sent by other account system servers 04, receive the call detection service sent by the acquiring payment system server 05 (code detection service call, Including the code to be detected), the transaction account detection decision server 01 will return the inspection result to the acquiring payment system server 05 after completing the code detection, wherein, the inspection result may include whether to include an illegal transaction account number, whether there is a risk of including an illegal transaction account number or including The value at risk of illegal trading accounts.

Exemplarily, as shown in FIG. 3 , the software structure of the server (which may be referred to as a transaction account number detection and decision server) may include a configuration management center 01, a transaction account number rule library 02, a source code reading module 03, and a source code syntax analysis module 04. , whitelist filtering module 05, code variable value matching module 06, risk threshold calculation module 07, interactive decision module 08, composition rule acquisition module 09 and data analysis processing module 10. Among them, the configuration management center 01 can be used to configure various parameters, such as the parameters of the transaction account composition rules, the parameters of the white list, the parameters of the risk calculation, the parameters of the risk threshold (the first risk threshold, the second risk threshold); the transaction account rule library 02 is used to store the transaction account composition rules; the source code reading module 03 is used to obtain the code to be detected, read the code to be detected and input it into the source code syntax analysis module 04, and calculate the difference (illegal) code segment of each batch at the same time , provided to the code variable value matching module 06 and the risk threshold calculation module 07 to calculate the risk value; the source code syntax analysis module 04 is used to extract the assignment statement for subsequent analysis by the whitelist filtering module 05 and the code variable value matching module 06; The list filtering module 05 is used to filter the elements identified as not needing to calculate the risk score, such as a specific file, the value of a specific variable (or constant), a specific statement, etc., the code identified as consistent with the elements in the whitelist will be filtered, No subsequent further matching will be performed, and subsequent risk value judgment will not be affected; the code variable value matching module 06 is used to perform rule judgment on the relevant source code features according to the input of the source code syntax analysis module 04 and the transaction account rule base 02, and Output the risk value to the risk threshold calculation module 07; the risk threshold calculation module 07 is used to calculate the risk value, perform arithmetic addition on the risk value output by the code variable value matching module 06, and summarize the risk prompt information to the interactive decision module. 08 outputs the detection results; the interactive decision module 08 is used to combine the calculation results of the risk threshold calculation module 07, and determine the code detection results through the decision threshold configuration parameters, which can be "no risk-passing detection", "low risk-requires manual verification" ", "high risk - refuse to submit"; the composition rule acquisition module 09 is used to regularly obtain the latest transaction account composition rules, and save it to the local database; the data analysis processing module 10 is used to record the correct rate of code detection, The parameters in the identification algorithm are adjusted and the neural network model is trained, and the parameter values in the algorithm are adjusted to improve the accuracy of the identification of illegal transaction accounts, thereby improving the accuracy of code detection.

Step S102, according to the transaction account composition rule, obtain the string length target information of the transaction account.

In this step, the string length target information of the transaction account may refer to the length corresponding to the string representing the transaction account in the code, and the string length target information of the transaction account may be obtained according to the composition rule of the transaction account, or may belong to A rule for the string length target information of a transaction account in the transaction account composition rule.

Specifically, according to the composition rule of the transaction account, the corresponding string length of the transaction account is obtained.

In step S103, each character string in the code to be detected is extracted, and the character string length information corresponding to each character string is obtained.

In this step, the character string length information corresponding to each character string may be the length corresponding to each character string.

Specifically, all character strings are extracted from the code to be detected, and the respective lengths of all character strings are obtained.

Step S104, the character string whose character string length information matches the character string length target information is used as the character string to be judged.

Specifically, it is determined whether the string length information matches the string length target information, and the matched string is used as the string to be determined, as shown in Figure 4, that is, the transaction account number that meets the transaction account composition rules is screened from the code to be detected. Length of string (filter strings that match the account length).

Step S105, it is judged whether the character string to be judged complies with the rules for forming a transaction account.

Specifically, as shown in FIG. 3 , the code variable value matching module 06 judges whether the character string to be judged conforms to all the rules in the composition rules of the transaction account number, or it can be judged whether the character string to be judged conforms to the except characters in the composition rules of the transaction account number. All rules other than the string length target information rules, such as judging whether to match the value in the corresponding bit of the defined value, whether to match the value of the defined value through logical transformation or operation, etc., and output the judgment score to the risk threshold calculation module 07.

Step S106, according to the judgment result, determine whether the code to be detected contains an illegal transaction account number.

In this step, the illegal transaction account may refer to a transaction account that is not allowed to appear in the code to be detected, and may be an illegal transaction account or a transaction account maliciously written into the code to be detected.

Specifically, according to the judgment result, a code detection result of whether the code to be detected includes an illegal transaction account number is obtained.

In the above code detection method, the composition rules of the code to be detected and the transaction account are obtained, according to the composition rules of the transaction account, the string length target information of the transaction account is obtained, each character string in the code to be detected is extracted, and the characters corresponding to each character string are obtained. String length information, take the string matching the string length information and the string length target information as the character string to be judged, judge whether the character string to be judged conforms to the rules for the composition of the transaction account, and determine whether the code to be detected contains an illegal transaction account according to the judgment result. . The solution can obtain the latest transaction account composition rules corresponding to each transaction account type in advance, obtain the code to be detected, obtain the string length target information of the transaction account according to the transaction account composition rules, extract all strings in the code to be detected, and Obtain the string length information corresponding to all the strings, determine whether the string length information matches the string length target information, take the matched string as the string to be judged, and judge whether the string to be judged conforms to the rules for the composition of the transaction account. According to the judgment result, it is determined whether the code to be detected contains an illegal transaction account number, thereby improving the accuracy and efficiency of code detection and reducing the cost of code detection.

In one embodiment, the extraction of each character string in the code to be detected in the above step S103 specifically includes: performing syntax analysis and/or lexical analysis on the code to be detected, extracting each assignment statement contained in the code to be detected; Each string contained.

In this embodiment, syntax analysis and/or lexical analysis are used to extract each assignment statement contained in the code to be detected, and syntax analysis and/or lexical analysis may analyze the types of variables (or constants), defined values, program codes The fixed relationship related to the account number implicit in the context and/or operation; the assignment statement may include variable definition statement, variable (or constant) assignment statement, logical operation statement, value operation statement and other risk statements (or assignment statements).

Specifically, as shown in Figure 4, after reading the code to be detected (uploaded code), the code to be detected is first matched to the whitelist file (code file that does not need to be checked/detected), if the code to be detected matches the whitelist file, Then directly obtain the detection result that the code to be detected does not contain an illegal transaction account number (check passed), if it does not match, then perform syntax analysis and/or lexical analysis on the code to be detected, and extract all assignment statements contained in the code to be detected (filter valid ones). statement line), extracts all strings contained in each assignment statement from all assignment statements.

In the technical solution of this embodiment, by extracting each assignment statement in the code to be detected and extracting each character string contained in each assignment statement, it is beneficial to improve the accuracy and efficiency of character string extraction, thereby helping to improve the accuracy of subsequent code detection. performance and efficiency.

In one embodiment, the above step S105 judging whether the character string to be judged conforms to the composition rule of the transaction account number specifically includes: judging whether each character string to be judged matches the account information in the preset transaction account whitelist; if not all matches, extracting Each unmatched character string to be judged in the character string to be judged; judge whether each unmatched character string to be judged conforms to the transaction account composition rule.

In this embodiment, the account information in the preset transaction account whitelist may be the account value in the preset transaction account whitelist.

Specifically, as shown in FIG. 4 , it is judged by the whitelist filter whether each character string to be judged matches the account value in the preset transaction account whitelist (matching the whitelist account), and the match means the transaction represented by the character string. The account belongs to the safe or legal account in the whitelist). If there is no match or non-match, filter out the non-matching to-be-judged strings from the to-be-judged strings, and determine whether the non-matching to-be-judged strings are not matched. It conforms to the composition rules of the transaction account. If so, extract the character string that conforms to the composition rules of the transaction account (that is, the statement line that hits the rules), which is used to judge whether there is a risk.

In the technical solution of this embodiment, by judging whether each character string to be judged matches the account information in the preset whitelist of transaction accounts, it is beneficial to reduce the time for judging whether the character string to be judged conforms to the composition rules of the transaction account, thereby helping to improve the code detection efficiency.

In one embodiment, the above method may further determine that the code to be detected does not contain an illegal transaction account number through the following steps, which specifically includes: if all matches, determining that the code to be detected does not contain an illegal transaction account number.

Specifically, as shown in FIG. 4 , it is determined by the whitelist filter whether each character string to be determined matches the account value in the preset transaction account whitelist, and if both match, it is determined that the code to be detected does not contain an illegal transaction account number, And get the test result that the code to be tested does not contain an illegal transaction account number (check passed).

The technical solution of this embodiment, by judging whether each character string to be judged matches the account information in the preset transaction account whitelist, is beneficial to prevent safe or legal accounts in the whitelist from being regarded as illegal transaction accounts, and if both match When the code detection results are directly obtained, it is beneficial to improve the accuracy and efficiency of code detection.

In one embodiment, determining whether the code to be detected includes an illegal transaction account number according to the judgment result in the above step S106 specifically includes: calculating the risk value of the code to be detected according to the judgment result; determining the risk threshold interval condition that the risk value satisfies; If the risk threshold interval condition satisfied by the value is the first risk threshold interval condition, it is determined that the code to be detected does not contain an illegal transaction account; if the risk threshold interval condition satisfied by the risk value is the second risk threshold interval condition, it is determined that the code to be detected contains The risk of an illegal transaction account; if the risk threshold interval condition satisfied by the risk value is the third risk threshold interval condition, it is determined that the code to be detected contains an illegal transaction account.

In this embodiment, the first risk threshold interval condition is a risk interval less than or equal to the first risk threshold; the second risk threshold interval condition is a risk interval greater than the first risk threshold and less than or equal to the second risk threshold; the third risk threshold The threshold interval condition is a risk interval greater than the second risk threshold. The first risk threshold may be M%, the second risk threshold may be N%, and the first risk threshold is smaller than the second risk threshold.

Specifically, as shown in FIG. 4 , according to the judgment result, the risk value of the code to be detected (whether there is a risk assessment) is calculated, and the risk threshold interval condition satisfied by the risk value is determined. If the risk threshold interval condition satisfied by the risk value is the first risk Threshold interval condition, it is determined that the code to be detected does not contain an illegal transaction account number (no risk - passed the detection, the inspection passed), if the risk threshold interval condition satisfied by the risk value is the second risk threshold interval condition, then it is determined that the code to be detected contains illegal transactions. The risk of the transaction account (low risk - manual verification is required, after manual verification, it is determined whether the inspection is passed or rejected), if the risk threshold interval condition satisfied by the risk value is the third risk threshold interval condition, then determine the code to be detected Contains illegal transaction accounts (high risk - refuse to submit, refuse to store).

In the technical solution of this embodiment, by determining the risk threshold interval condition satisfied by the risk value of the code to be detected, it is beneficial to more accurately obtain the code detection result of the code to be detected and improve the accuracy of code detection.

In one embodiment, the above method may also obtain the first risk threshold and the second risk threshold through the following steps, which specifically includes: obtaining a code sample and a real result of whether the code sample includes an illegal transaction account; using the code sample and the real result to treat training The first risk threshold and the second risk threshold are obtained through the trained risk threshold acquisition model.

In this embodiment, the risk threshold acquisition model to be trained may be a neural network model, such as a BP neural network model.

Specifically, obtain the real results of the code samples and whether the code samples contain illegal transaction accounts, input the code samples and real results into the BP neural network model including the BP algorithm, and use the gradient search technology to make the actual output value and expected output of the network. The error mean square error of the value is the smallest. The BP algorithm includes two processes of forward propagation of the signal and back propagation of the error, that is, the error output is calculated in the direction from the input to the output, and the adjustment weights and thresholds are from the output to the output. The direction of the input is carried out. When forward propagation, the input signal acts on the output node through the hidden layer, and after nonlinear transformation, the output signal is generated. Backpropagation is to backpropagate the output error layer by layer to the input layer through the hidden layer, and distribute the error to all neural units in each layer, and use the error signal obtained from each layer as the basis for adjusting the weights of each unit. The connection strength between the input node and the hidden layer node, the connection strength between the hidden layer node and the output node, and the threshold value make the error decrease along the gradient direction. Corresponding parameters (including the first risk threshold and the second risk threshold, and may also include the parameters of the transaction account composition rules, the parameters of the whitelist, the parameters of the risk calculation, etc.).

In the technical solution of this embodiment, the first risk threshold and the second risk threshold are obtained through the trained risk threshold obtaining model, which is beneficial to obtain better first risk threshold and second risk threshold, thereby helping to improve the accuracy of code detection. sex.

It should be understood that, although the steps in the flowcharts involved in the above embodiments are sequentially displayed according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, the execution of these steps is not strictly limited to the order, and the steps may be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed and completed at the same time, but may be performed at different times The execution order of these steps or phases is not necessarily sequential, but may be performed alternately or alternately with other steps or at least a portion of the steps or phases in the other steps.

Based on the same inventive concept, an embodiment of the present application further provides a code detection apparatus for implementing the above-mentioned code detection method. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme described in the above method, so the specific limitations in one or more code detection device embodiments provided below can refer to the above limitations on the code detection method, It is not repeated here.

In one embodiment, as shown in FIG. 5, a code detection apparatus is provided, and the apparatus 500 may include:

The code to be detected acquisition module 501 is used to acquire the composition rule of the code to be detected and the transaction account;

The string length target information acquisition module 502 is configured to obtain the string length target information of the transaction account according to the transaction account composition rule;

A character string extraction module 503, configured to extract each character string in the code to be detected, and obtain character string length information corresponding to each character string;

The character string to be judged is used as a module 504, which is used to use the character string whose length information of the character string matches with the target information of the character string length as the character string to be judged;

A transaction account composition rule judgment module 505, configured to judge whether the character string to be judged conforms to the transaction account composition rule;

The illegal transaction account number determination module 506 is configured to determine whether the code to be detected contains an illegal transaction account number according to the judgment result.

In one embodiment, the character string extraction module 503 is further configured to perform syntax analysis and/or lexical analysis on the code to be detected, and extract each assignment statement contained in the code to be detected; Each string contained.

In one embodiment, the transaction account composition rule determination module 505 is further configured to determine whether each character string to be determined matches the account information in the preset transaction account whitelist; Each unmatched character string to be judged; judges whether each unmatched character string to be judged conforms to the transaction account composition rule.

In one embodiment, the apparatus 500 further includes: a module for determining no illegal transaction account number, configured to determine that the code to be detected does not contain an illegal transaction account number if they all match.

In one embodiment, the illegal transaction account determination module 506 is further configured to calculate the risk value of the code to be detected according to the judgment result; determine the risk threshold interval condition that the risk value satisfies; if the risk value satisfies the risk If the threshold interval condition is the first risk threshold interval condition, it is determined that the code to be detected does not contain an illegal transaction account number; if the risk threshold interval condition satisfied by the risk value is the second risk threshold interval condition, then the code to be detected is determined to be There is a risk of including an illegal transaction account number; if the risk threshold interval condition satisfied by the risk value is the third risk threshold interval condition, then it is determined that the code to be detected contains an illegal transaction account number; wherein, the first risk threshold interval condition is A risk interval less than or equal to the first risk threshold; the second risk threshold interval condition is a risk interval greater than the first risk threshold and less than or equal to the second risk threshold; the third risk threshold interval condition is greater than all the risk interval of the second risk threshold.

In one embodiment, the apparatus 500 further includes: a risk threshold acquisition module, configured to acquire a code sample and a real result of whether the code sample contains an illegal transaction account; and obtain a risk threshold to be trained by using the code sample and the real result The model is trained to obtain a trained risk threshold acquisition model; the first risk threshold and the second risk threshold are acquired through the trained risk threshold acquisition model.

Each module in the above code detection apparatus can be implemented in whole or in part by software, hardware and combinations thereof. The above modules can be embedded in or independent of the processor in the computer device in the form of hardware, or stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

It should be noted that the method and device for code detection provided in this application can be used in application fields involving code detection in the financial field, and can also be used in processing involving code detection in any field other than the financial field. The application field of the detection method and device is not limited.

In one embodiment, a computer device is provided, the computer device may be a server, and its internal structure diagram may be as shown in FIG. 6 . The computer device includes a processor, memory, and a network interface connected by a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes non-volatile storage media and internal memory. The nonvolatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the execution of the operating system and computer programs in the non-volatile storage medium. The database of the computer equipment is used to store the code to be detected and the transaction account number composition rule data. The network interface of the computer device is used to communicate with an external terminal through a network connection. The computer equipment also includes an input and output interface. The input and output interface is a connection circuit for exchanging information between the processor and an external device. They are connected to the processor through a bus, which is referred to as an I/O interface. The computer program, when executed by a processor, implements a code detection method.

Those skilled in the art can understand that the structure shown in FIG. 6 is only a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer equipment to which the solution of the present application is applied. Include more or fewer components than shown in the figures, or combine certain components, or have a different arrangement of components.

In one embodiment, a computer device is also provided, including a memory and a processor, where a computer program is stored in the memory, and the processor implements the steps in the foregoing method embodiments when the processor executes the computer program.

In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, implements the steps in the foregoing method embodiments.

In one embodiment, a computer program product is provided, including a computer program, which implements the steps in each of the foregoing method embodiments when the computer program is executed by a processor.

It should be noted that the user information (including but not limited to user equipment information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in this application are all Information and data authorized by the user or fully authorized by the parties.

Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be implemented by instructing relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage In the medium, when the computer program is executed, it may include the processes of the above-mentioned method embodiments. Wherein, any reference to a memory, a database or other media used in the various embodiments provided in this application may include at least one of a non-volatile memory and a volatile memory. Non-volatile memory may include Read-Only Memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive memory (ReRAM), magnetic variable memory (Magnetoresistive Random Memory) Access Memory (MRAM), Ferroelectric Random Access Memory (FRAM), Phase Change Memory (PCM), graphene memory, etc. Volatile memory may include random access memory (Random Access Memory, RAM) or external cache memory, and the like. By way of illustration and not limitation, the RAM may be in various forms, such as static random access memory (Static Random Access Memory, SRAM) or dynamic random access memory (Dynamic Random Access Memory, DRAM). The database involved in the various embodiments provided in this application may include at least one of a relational database and a non-relational database. The non-relational database may include a blockchain-based distributed database, etc., but is not limited thereto. The processors involved in the various embodiments provided in this application may be general-purpose processors, central processing units, graphics processors, digital signal processors, programmable logic devices, data processing logic devices based on quantum computing, etc., and are not limited to this.

The technical features of the above embodiments can be combined arbitrarily. In order to make the description simple, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features It is considered to be the range described in this specification.

The above-mentioned embodiments only represent several embodiments of the present application, and the descriptions thereof are relatively specific and detailed, but should not be construed as a limitation on the scope of the patent of the present application. It should be pointed out that for those skilled in the art, without departing from the concept of the present application, several modifications and improvements can be made, which all belong to the protection scope of the present application. Therefore, the scope of protection of the present application should be determined by the appended claims.

Claims (10)

1. a code detection method, is characterized in that, described method comprises: Obtain the code to be detected and the rules for the composition of the transaction account; According to the transaction account composition rule, obtain the string length target information of the transaction account; Extracting each character string in the code to be detected, and obtaining the string length information corresponding to each character string; The character string matched with the character string length information and the character string length target information is regarded as the character string to be judged; Judging whether the character string to be judged complies with the transaction account composition rule; According to the judgment result, it is determined whether the code to be detected contains an illegal transaction account number. 2. The method according to claim 1, wherein the extracting each character string in the code to be detected comprises: Syntax analysis and/or lexical analysis are performed on the code to be detected, and each assignment statement contained in the code to be detected is extracted; Each character string contained in each of the assignment statements is extracted. 3. The method according to claim 1, wherein the judging whether the character string to be judged complies with the transaction account number composition rule comprises: Determine whether each string to be judged matches the account information in the preset transaction account whitelist; If not all matches, extract each unmatched character string to be judged in the character string to be judged; It is judged whether the non-matching character strings to be judged conform to the transaction account composition rule. 4. The method according to claim 3, wherein the method further comprises: If all match, it is determined that the code to be detected does not contain an illegal transaction account number. 5. The method according to any one of claims 1 to 4, wherein determining whether the code to be detected includes an illegal transaction account number according to the judgment result, comprising: According to the judgment result, calculate the risk value of the code to be detected; determining the risk threshold interval condition that the risk value satisfies; If the risk threshold interval condition satisfied by the risk value is the first risk threshold interval condition, it is determined that the code to be detected does not contain an illegal transaction account number; If the risk threshold interval condition satisfied by the risk value is the second risk threshold interval condition, it is determined that the code to be detected has a risk of including an illegal transaction account number; If the risk threshold interval condition satisfied by the risk value is the third risk threshold interval condition, it is determined that the code to be detected contains an illegal transaction account number; Wherein, the first risk threshold interval condition is a risk interval less than or equal to the first risk threshold; the second risk threshold interval condition is a risk interval greater than the first risk threshold and less than or equal to the second risk threshold; The third risk threshold interval condition is a risk interval greater than the second risk threshold. 6. The method according to claim 5, wherein the method further comprises: Obtain a code sample and whether the code sample contains the real result of an illegal transaction account; Use the code sample and the real result to train the risk threshold acquisition model to be trained to obtain the trained risk threshold acquisition model; The first risk threshold and the second risk threshold are obtained through the trained risk threshold obtaining model. 7. A code detection device, wherein the device comprises: The code acquisition module to be tested is used to obtain the composition rules of the code to be tested and the transaction account; a string length target information acquisition module, configured to obtain the string length target information of the transaction account according to the transaction account composition rule; a character string extraction module, used for extracting each character string in the code to be detected, and obtaining character string length information corresponding to each character string; The character string to be judged is used as a module for taking the character string whose length information of the character string matches with the target information of the length of the character string as the character string to be judged; A transaction account composition rule judgment module, configured to judge whether the character string to be judged conforms to the transaction account composition rule; The illegal transaction account number determination module is used for determining whether the code to be detected contains an illegal transaction account number according to the judgment result. 8. A computer device, comprising a memory and a processor, wherein the memory stores a computer program, wherein the processor implements the method according to any one of claims 1 to 6 when the processor executes the computer program. step. 9. A computer-readable storage medium on which a computer program is stored, wherein the computer program implements the steps of the method according to any one of claims 1 to 6 when the computer program is executed by a processor. 10. A computer program product comprising a computer program, characterized in that the computer program implements the steps of the method according to any one of claims 1 to 6 when the computer program is executed by a processor.

Images