Features of multiple dimensions are extracted from information included in a URL access request. A risk score of the URL access request is obtained by providing the features to a predetermined URL attack detection model for prediction calculation, where the predetermined URL attack detection model is a machine learning model obtained through training based on the Isolation Forest machine learning algorithm. It is determined, based on the risk score, that the URL access request is a URL attack request.