Invasion detection method and device

The invention discloses an invasion detection method and device. The invasion detection method comprises steps: data to be detected is obtained, and the data to be detected is detected data; corresponding behavior characteristics of the data to be detected are determined, and the behavior characteristics are characteristics used for reflecting corresponding execution behaviors of the data to be detected; a detection mode is selected from preset detection modes according to the behavior characteristics and the preset modes are detection modes set in advance according to behavior characteristics of invasion behaviors; whether a corresponding execution behavior of the data to be detected is an invasion behavior is detected based on the selected detection mode. The problem is solved that deformed invasion behaviors are difficult to detect accurately and effects of accurate detection of deformed invasion behaviors are achieved.