{
	"modelcfg": [{
		"modelId": "3001000000",
		"path": "/system/lib64/libsg_system_risk_detection.z.so",
		"format": "so",
		"start-mode": 2,
		"preload": [""],
		"eventList": ["1011009000",
		"1011009001",
		"1011009100",
		"1011009101",
		"1011009102",
		"1011009103",
		"1011009104"],
		"permissions": "ohos.permission.securityguard.REQUEST_SECURITY_MODEL_RESULT",
		"db_table": "risk_event",
		"running_cntl": 0,
		"caller": ["security_guard"],
		"type": "build-in",
		"buildInDetectionCfg": {
			"rules": [{
				"eventId": 1011009000,
				"fields": [{
					"fieldName": "cred",
					"fieldType": "int32",
					"value": "1"
				},
				{
					"fieldName": "status",
					"fieldType": "int32",
					"value": "0"
				}],
				"fieldsRelation": "AND"
			},
			{
				"eventId": 1011009001,
				"fields": [{
					"fieldName": "cred",
					"fieldType": "int32",
					"value": "1"
				},
				{
					"fieldName": "status",
					"fieldType": "int32",
					"value": "0"
				}],
				"fieldsRelation": "AND"
			},
			{
				"eventId": 1011009100,
				"fields": [{
					"fieldName": "cred",
					"fieldType": "int32",
					"value": "1"
				},
				{
					"fieldName": "status",
					"fieldType": "int32",
					"value": "0"
				}],
				"fieldsRelation": "AND"
			},
			{
				"eventId": 1011009101,
				"fields": [{
					"fieldName": "cred",
					"fieldType": "int32",
					"value": "1"
				},
				{
					"fieldName": "status",
					"fieldType": "int32",
					"value": "0"
				}],
				"fieldsRelation": "AND"
			},
			{
				"eventId": 1011009102,
				"fields": [{
					"fieldName": "cred",
					"fieldType": "int32",
					"value": "1"
				},
				{
					"fieldName": "status",
					"fieldType": "int32",
					"value": "0"
				}],
				"fieldsRelation": "AND"
			},
			{
				"eventId": 1011009103,
				"fields": [{
					"fieldName": "cred",
					"fieldType": "int32",
					"value": "1"
				},
				{
					"fieldName": "status",
					"fieldType": "int32",
					"value": "0"
				}],
				"fieldsRelation": "AND"
			},
			{
				"eventId": 1011009104,
				"fields": [{
					"fieldName": "cred",
					"fieldType": "int32",
					"value": "1"
				},
				{
					"fieldName": "status",
					"fieldType": "int32",
					"value": "0"
				}],
				"fieldsRelation": "AND"
			}],
			"rulesRelation": "OR",
			"trueResult": "risk",
			"falseResult": "safe"
		}
	},
	{
		"modelId": "3001000001",
		"path": "/system/lib64/libsg_system_risk_detection.z.so",
		"format": "so",
		"start-mode": 2,
		"preload": [""],
		"eventList": ["1011009002",
		"1011009003",
		"1011009004"],
		"permissions": "ohos.permission.securityguard.REQUEST_SECURITY_MODEL_RESULT",
		"db_table": "risk_event",
		"running_cntl": 0,
		"caller": ["security_guard"],
		"type": "build-in",
		"buildInDetectionCfg": {
			"rules": [{
				"eventId": 1011009002,
				"fields": [{
					"fieldName": "cred",
					"fieldType": "int32",
					"value": "1"
				},
				{
					"fieldName": "status",
					"fieldType": "int32",
					"value": "0"
				}],
				"fieldsRelation": "AND"
			},
			{
				"eventId": 1011009003,
				"fields": [{
					"fieldName": "cred",
					"fieldType": "int32",
					"value": "1"
				},
				{
					"fieldName": "status",
					"fieldType": "int32",
					"value": "0"
				}],
				"fieldsRelation": "AND"
			},
			{
				"eventId": 1011009004,
				"fields": [{
					"fieldName": "cred",
					"fieldType": "int32",
					"value": "1"
				},
				{
					"fieldName": "status",
					"fieldType": "int32",
					"value": "0"
				}],
				"fieldsRelation": "AND"
			}],
			"rulesRelation": "OR",
			"trueResult": "risk",
			"falseResult": "safe"
		}
	},
	{
		"modelId": "3001000002",
		"path": "/system/lib64/libsg_system_risk_detection.z.so",
		"format": "so",
		"start-mode": 2,
		"preload": [""],
		"eventList": ["1011009005"],
		"permissions": "ohos.permission.securityguard.REQUEST_SECURITY_MODEL_RESULT",
		"db_table": "risk_event",
		"running_cntl": 0,
		"caller": ["security_guard"],
		"type": "build-in",
		"buildInDetectionCfg": {
			"rules": [{
				"eventId": 1011009005,
				"fields": [{
					"fieldName": "cred",
					"fieldType": "int32",
					"value": "1"
				},
				{
					"fieldName": "status",
					"fieldType": "int32",
					"value": "0"
				}],
				"fieldsRelation": "AND"
			}],
			"rulesRelation": "OR",
			"trueResult": "risk",
			"falseResult": "safe"
		}
	},
	{
		"modelId": "3001000003",
		"path": "/system/lib64/libaudit_model.z.so",
		"format": "so",
		"start-mode": 1,
		"preload": [""],
		"eventList": ["1011015000",
		"1011015001",
		"1011015002",
		"1011015003",
		"1011015004",
		"1011015005",
		"1011015006",
		"1011015007",
		"1011015008",
		"1011015009",
		"1011015010",
		"1011015011",
		"1011015012",
		"1011015013",
		"1011015014",
		"1011015015",
		"1011015016"],
		"permissions": "ohos.permission.securityguard.REQUEST_SECURITY_MODEL_RESULT",
		"db_table": "audit_event",
		"running_cntl": 0,
		"caller": ["security_guard"]
	},
	{
		"modelId": "3001000004",
		"path": "/system/lib64/libsg_threat_detection.z.so",
		"format": "so",
		"start-mode": 1,
		"preload": [""],
		"eventList": ["1011009200",
		"1011009201",
		"1011009202",
		"1011009203"],
		"permissions": "ohos.permission.securityguard.REQUEST_SECURITY_MODEL_RESULT",
		"db_table": "risk_event",
		"running_cntl": 0,
		"caller": ["security_guard"]
	},
	{
		"modelId": "3001000005",
		"path": "/system/lib64/libsg_oem_mode_detection.z.so",
		"format": "so",
		"start-mode": 2,
		"preload": [""],
		"eventList": [],
		"permissions": "ohos.permission.securityguard.REQUEST_SECURITY_MODEL_RESULT",
		"db_table": "",
		"running_cntl": 0,
		"caller": ["security_guard"]
	},
	{
		"modelId": "3001000006",
		"path": "/system/lib64/libsg_app_risk_detection.z.so",
		"format": "so",
		"start-mode": 2,
		"preload": [""],
		"eventList": [""],
		"permissions": "ohos.permission.securityguard.REQUEST_SECURITY_MODEL_RESULT",
		"db_table": "risk_event",
		"running_cntl": 0,
		"caller": ["security_guard"],
		"type": "app",
		"appDetectionCfg" : {
			"detectionCategory": "signature"
  		}
	},
	{
		"modelId": "3001000007",
		"path": "/system/lib64/libsg_app_risk_detection.z.so",
		"format": "so",
		"start-mode": 2,
		"preload": [""],
		"eventList": ["1037000001"],
		"permissions": "ohos.permission.securityguard.REQUEST_SECURITY_MODEL_RESULT",
		"db_table": "risk_event",
		"running_cntl": 0,
		"caller": ["security_guard"],
		"type": "app",
		"appDetectionCfg" : {
			"detectionCategory": "url"
		}
	},
	{
		"modelId": "3001000008",
		"path": "/system/lib64/libsg_time_event_related_analysis.z.so",
		"format": "so",
		"start-mode": 1,
		"preload": [""],
		"eventList": ["1037000001"],
		"permissions": "ohos.permission.securityguard.REQUEST_SECURITY_MODEL_RESULT",
		"db_table": "risk_event",
		"running_cntl": 0,
		"caller": ["security_guard"]
	}]
}