Abstract: According to embodiments of the present disclosure, there is provided a system, method, electronic device, storage medium and program product of security protection. The system comprises: a security computing sub-system, configured to manage security of developed code to compile the developed code into an installation file corresponding to a target application and a service program for supporting the target application; a data exchange sub-system, configured to manage data communication of the target application or service program with RoW (rest of World); and a security sandbox sub-system, configured to manage traffic data associated with the target application. In this way, the embodiments of the present disclosure can guarantee the security and compliance of data related to the target application.

Abstract: The present disclosure relates to a method and device for identifying user behavior, which identifies malicious behavior more effectively and accurately. The method includes: acquiring access behavior of a terminal within a sliding time window having a present period. The method evaluates an access pattern of the access behavior within the sliding time window, and determines whether the access behavior of the terminal is a malicious access based on the evaluated access pattern.