CN112753023A

CN112753023A - Data processing method and device, electronic equipment and computer readable storage medium

Info

Publication number: CN112753023A
Application number: CN201880097994.XA
Authority: CN
Inventors: 罗月
Original assignee: Guangdong Oppo Mobile Telecommunications Corp Ltd; Shenzhen Huantai Technology Co Ltd
Current assignee: Guangdong Oppo Mobile Telecommunications Corp Ltd; Shenzhen Huantai Technology Co Ltd
Priority date: 2018-10-26
Filing date: 2018-10-26
Publication date: 2021-05-04
Also published as: WO2020082383A1

Abstract

The application discloses a data processing method and device, electronic equipment and a computer readable storage medium, and relates to the technical field of mobile terminals. The method comprises the following steps: acquiring a first updating amount of a target application program in a first time period; acquiring a second updating amount of the target application program in a second time period; acquiring a difference value between the first updating amount and the second updating amount; and if the difference value meets a preset condition, judging that the target application program belongs to abnormal application. Whether the updating amount changes steadily can be determined through the difference value of the updating amount in the two time periods, and then the application program which maliciously tampers with the updating amount is marked as abnormal application.

Description

Data processing method and device, electronic equipment and computer readable storage medium

Technical Field

The present application relates to the field of mobile terminal technologies, and in particular, to a data processing method and apparatus, an electronic device, and a computer-readable storage medium.

Background

An application center client is installed in an existing electronic device, a user can download, update or open some application programs in the application center client, specifically, the client can display an application list, names of a plurality of application programs are shown in the application list, generally, the application programs with the larger updating amount or downloading amount are more easily downloaded by the user when the position in the application list is more front. Therefore, some application developers increase the installation amount of the application by refreshing the application download amount in order to increase the installation amount of the application, which impairs the benefit of users.

Disclosure of Invention

The application provides a data processing method, a data processing device, an electronic device and a computer readable storage medium, so as to overcome the defects.

In a first aspect, an embodiment of the present application provides a data processing method, including: acquiring a first updating amount of a target application program in a first time period; acquiring a second updating amount of the target application program in a second time period; acquiring a difference value between the first updating amount and the second updating amount; and if the difference value meets a preset condition, judging that the target application program belongs to abnormal application.

In a second aspect, an embodiment of the present application further provides a data processing apparatus, including: the device comprises a first acquisition unit, a second acquisition unit, a third acquisition unit and a judgment unit. The device comprises a first acquisition unit, a second acquisition unit and a control unit, wherein the first acquisition unit is used for acquiring a first updating amount of a target application program in a first time period. And the second acquisition unit is used for acquiring a second updating amount of the target application program in a second time period. A third obtaining unit configured to obtain a difference between the first update amount and the second update amount. And the judging unit is used for judging that the target application program belongs to abnormal application if the difference value meets a preset condition.

In a third aspect, an embodiment of the present application further provides an electronic device, including: one or more processors; a memory; one or more applications, wherein the one or more applications are stored in the memory and configured to be executed by the one or more processors, the one or more programs configured to perform the above-described methods.

In a fourth aspect, an embodiment of the present application further provides a computer-readable storage medium, where a program code is stored in the computer-readable storage medium, and the program code can be called by a processor to execute the method.

The data processing method, the data processing device, the electronic device and the computer readable storage medium provided by the embodiment of the application determine two time periods, namely a first time period and a second time period, then obtain a first update amount of a target application program in the first time period and a second update amount of the target application program in the second time period, then obtain a difference value between the first update amount and the second update amount, and if the difference value meets a preset condition, determine that the target application program belongs to abnormal application. Because the update volume of the application program is increased dramatically when the update volume is forged, whether the update volume changes steadily can be determined by the difference value of the update volumes in the two time periods, and the application program which maliciously tampers with the update volume is marked as abnormal application.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present application, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without creative efforts.

Fig. 1 is a schematic view illustrating an application scenario of a data processing method and apparatus provided in an embodiment of the present application;

FIG. 2 is a schematic diagram illustrating an application push interface provided by an embodiment of the present application;

FIG. 3 is a flow chart of a method of processing data according to an embodiment of the present application;

FIG. 4 is a flow chart of a method of processing data according to another embodiment of the present application;

FIG. 5 illustrates a method flow diagram of a data processing method provided by yet another embodiment of the present application;

FIG. 6 is a flow chart of a method of data processing according to yet another embodiment of the present application;

FIG. 7 is a flow chart of a method of processing data provided by yet another embodiment of the present application;

FIG. 8 is a block diagram of a data processing apparatus provided in an embodiment of the present application;

FIG. 9 shows a block diagram of a data processing apparatus according to another embodiment of the present application;

fig. 10 shows a block diagram of an electronic device provided in an embodiment of the present application;

fig. 11 illustrates a storage unit for storing or carrying program codes for implementing a data processing method according to an embodiment of the present application.

Detailed Description

In order to make the technical solutions better understood by those skilled in the art, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application.

Referring to fig. 1, an application scenario diagram of the data processing method and apparatus provided in the embodiment of the present application is shown. As shown in fig. 1, the electronic device 100 and the server 200 are located in a wireless network or a wired network, and the electronic device 100 and the server 200 perform data interaction.

In the embodiment of the present application, the electronic device 100 may be a mobile terminal device, and may include, for example, a smart phone, a tablet computer, an e-book reader, a laptop portable computer, a car-mounted computer, a wearable mobile terminal, and so on.

In some embodiments, the client is installed in the electronic device 100, for example, may be an application installed in the electronic device 100, and in this embodiment, the client is an application-centric client, and the application-centric client is service software, so that a user can download a new application through the application-centric client, and also can update and start an installed application. When a user logs in through an account at an application center client, all information corresponding to the account can be stored in the storage space of the server 200. The server 200 may be a single server, or a server cluster, or a local server, or a cloud server. The login account of the application center client is bound with the mobile terminal where the application center client is currently installed, and the server can store relevant data of the application program in the mobile terminal, such as the installed application program and information such as the version number of the application program.

Specifically, the application center client includes multiple interfaces, different interfaces display different contents, and different types of interfaces are different. For example, some interfaces are of the type of home page, and as shown in fig. 2, an application push interface of an application center client is shown. The identifiers of the plurality of application programs are displayed in the application push interface, for example, the plurality of icons in fig. 2 are identifiers of the plurality of application programs, each icon corresponds to one installation key, and the user can install the application program in the electronic device by clicking the installation key corresponding to the application program. In one embodiment, in the application push interface, the arrangement of the identifiers of the respective application programs is distributed according to the popularity of the application programs, that is, the application programs with higher popularity are more easily seen by the user and more easily installed by the user at the front, i.e. the top, of the position of the application push interface.

In addition, the client acquires the installation amount and the update amount of each application function program, so that the installation update amount of each application program is counted, and the heat of each application program is counted, so that when the application push interface shown in fig. 2 is displayed, the application programs displayed in the interface can be sorted according to the heat and then displayed.

However, the inventor finds in research that, if some developers of the application maliciously change the update times of the application, for example, the update times of the application are increased, when the client counts the update times of the application, the obtained update times are false update times after falsification by the developer, and the client is caused to arrange the identifier of the application at a front position in an application push interface, so as to increase the installation amount of the application.

Therefore, in order to overcome the above-mentioned drawbacks, as shown in fig. 3, an embodiment of the present application provides a data processing method, which can be applied to an electronic device and can also be applied to a server, and in the embodiment of the present application, the method is applied to a client of the electronic device, and specifically, the method includes: s301 to S304.

S301: a first update amount of a target application program in a first time period is obtained.

The specific implementation manner of the client acquiring the first update amount of the target application may be that the electronic device sends a first update acquisition request to a target server of the target application, where the first update acquisition request includes description information of a first time period and an identifier of the target application, so that the target server acquires the first update acquisition request, parses the first update acquisition request to obtain the first time period and the identifier of the target application, searches for the update amount corresponding to the first time period in an update record of the target application stored in advance, and returns the update amount to the client of the electronic device as the first update amount.

In a specific embodiment of the electronic device obtaining the first update amount of the target application program, the client may send the first update request to a server corresponding to the client, for example, the server in fig. 1. The server is used as a server for storing and providing data for the client, and the server stores data of all application programs displayed in the client, and includes an update record of each application program, and the update record may be obtained by the server from the server corresponding to each application function program. After the server corresponding to the client acquires the first update request, the update amount of the target application program in the first time period is searched according to the first update request to serve as the first update amount, and the first update amount is returned to the client of the electronic device.

The target application may be any application that can be presented in the client, or may be an application that satisfies the update amount change condition, for example, the update amount may exceed a certain value in a specified time period, where the specified time period may be set by a user, for example, the time period may be a time period corresponding to a last week.

The first time period may be a certain time period within the specified time period, for example, a time period from early morning on wednesday to 23 o' clock 59 on that day.

S302: and acquiring a second updating amount of the target application program in a second time period.

The second time period may be a time period different from the first time period, that is, the two time periods may be without any intersection or may be partially intersected, and the first duration of the first time period and the second duration of the second time period may be the same or different, if the first duration and the second duration are different, the valid duration of the first time period and the valid duration of the second time period are approximately the same, that is, the valid durations thereof are not different, wherein each time period includes a valid duration and a non-valid duration, wherein the application is updated frequently in the sub-time period corresponding to the valid duration of the time period, and the update amount of the application is low in the sub-time period corresponding to the non-valid duration, for example, the first time period is from morning of the current day to 23 o 'clock 59 o' clock of the current day, then early morning to 08:00 is a non-valid duration, that is, the update amount of the application in the sub-time period is low, and 08:00 to 23 point 59 is divided into effective time periods. If the first time period is 23:59 minutes from the morning to the current day of the day and the second time period is 08:00 to 23:59 minutes from the previous day, although the time lengths of the first time period and the second time period are different, the effective time length of the first time period is equal to that of the second time period, the time period with frequent update in the first time period is the same as that of the second time period, so that the first time period and the second time period are properly selected.

Of course, the duration of the first time period and the duration of the second time period may also be chosen to be equal.

S303: and acquiring a difference value between the first updating amount and the second updating amount.

The result of subtracting the second update amount from the first update amount is the above-mentioned difference, and in addition, considering that the first update amount may be larger than the second update amount, the absolute value of the result of subtracting the second update amount from the first update amount may be taken as the difference between the first update amount and the second update amount.

S304: and if the difference value meets a preset condition, judging that the target application program belongs to abnormal application.

If the difference between the first update amount in the first time period and the second update amount in the second time period can represent a change trend of the update amount between the two time periods, a preset condition is set, for example, if the difference satisfies the preset condition, the difference may be that the magnitude of the difference satisfies a frequency range or is greater than a certain frequency threshold, in this embodiment of the present application, an absolute value of a result obtained by subtracting the second update amount from the first update amount is taken as a difference between the first update amount and the second update amount, and if the difference satisfies the preset condition, a specific implementation manner of determining that the target application program belongs to an abnormal application is to determine whether the difference is greater than a preset value, and if the difference is greater than the preset value, the target application program is determined to belong to an abnormal application.

The abnormal application is an application program category defined by a user, and is used for indicating that the application program is an application program with malicious tampering refresh times.

In addition, the method shown in fig. 4 may be referred to for setting the first time period and the second time period, and as shown in fig. 4, an embodiment of the present application provides a data processing method, which may be applied to an electronic device and may also be applied to a server, and in the embodiment of the present application, the method is applied to a client of the electronic device, and specifically, the method includes: s401 to S406.

S401: a first time period is determined according to a current time point.

The current time point is a system time point of the electronic device when the step S401 of the present method is executed. As an embodiment, a time interval is preset, according to which the time axis is divided into a plurality of time segments, for example, the time interval is 6 hours, and then the time interval is divided into a segment 1 from 0 point 01 to 6 point 0, a segment 2 from 6 point 01 to 11 point 59, and so on.

After the current time point is acquired, determining a time period to which the current time point belongs, for example, if the current time point is 10: 0, the time period to which the current time point belongs is 2, and then the time period 2 may be used as a first time period of the current time point, and a time range of the first time period is 6: 01 to 10: 0, of course, if 6: 01 to 11: 59 are also used as the first time period, since the current time point is 10: 0, it is necessary to continue to extend the time count to an end point of the time period 2, that is, 11: 59. In addition, a ratio of an absolute value of a difference between the current time point and the end point of the current time period and a duration of the current time period is recorded as a first time ratio, if the first time ratio is smaller than a preset ratio, the current time period is regarded as the first time period, and if the first time ratio is greater than or equal to the preset ratio, a first preset time length before the current time period is regarded as the first time period, where the preset ratio may be set according to the actual situation, and may be, for example, 80%.

Therefore, the manner of determining the first time period according to the current time point may be: and determining the current time period to which the current time point belongs, and taking the time period within a first preset time length before the current time period as a first time period. For example, it is determined that the current time period is period 2, and a time period in a time interval before period 2 is taken as the first time period, that is, period 1 is taken as the first time period, but it may also be determined that a time period with a time length of a first preset time length is selected as the first time period before period 2, for example, a time period with a time length of a time interval is defined as the first time period in all time periods before period 2, and may be, for example, 17:00 to 22: 59, the determined first time period is different from the above-mentioned time period 1, time period 2, time period 3, etc. sequentially divided according to the time interval, but the time length of the first time period is the same as the time interval.

As another embodiment, the manner of determining the first time period may also be determining a current time period to which the current time point belongs; and taking the current time period as a first time period.

In addition, after determining the current time period to which the current time point belongs, in addition to determining whether to use the current time period as the first time period or use a time period within a first preset time length before the current time period as the first time period according to the magnitude relation between the first time ratio and the preset proportion value.

And after determining the current time period to which the current time point belongs, determining whether the current time period is matched with a preset time period, if so, taking the current time period as the first time period, and if not, taking a time period within a first preset time length before the current time period as the first time period, so that at least part of the first time period is matched with the preset time period. Specifically, the operation of the user for operating the electronic device to update the application program and the time period corresponding to the operation within the specified time period are acquired, so that the time period in which the number of times of the update operation meets the preset number of times condition can be determined as the preset time period. The embodiment that the number of times of the update operation satisfies the preset number of times condition is to divide 24 hours a day into a plurality of time periods according to a certain time interval, for example, the 24 hours may be divided into time period 1, time period 2, time period 3, and time period 4 according to the above time interval, or of course, the time interval may be divided into more fine divisions, that is, the time interval is modified into 4 hours, and then one time period is divided every 4 hours from the point 0. Then, counting the number of times of the updating operation in each time interval, sorting all the time intervals according to the number of times of the updating operation, and taking the first 3 corresponding time intervals with the top sorting as the preset time interval. Thereby, the determined first time period is more reasonable.

S402: and determining a second time period according to the first time period.

The second time period may be determined to be before the first time period or after the first time period.

If the second time period is after the first time period, the second time period is obtained by extending a certain time after the current time point.

Specifically, if a time period within a first preset time length before the current time period is taken as the first time period, a time period within a second preset time length before the first time period is taken as the second time period. Then, as an embodiment, the first preset time period is equal to the second preset time period.

And if the current time period is taken as a first time period, taking a time period within a third preset time length before the first time period as a second time period. Then as another embodiment, the third preset time length is equal to the time length of the current time period.

As an embodiment, 24 hours a day is divided into a plurality of time periods according to time intervals in advance, determining the time period to which the current time point belongs, recording the ratio of the absolute value of the difference value between the current time point and the end point of the current time period to the time length of the current time period as a first time ratio, if the first time ratio is smaller than the preset proportional value, the current time period is taken as the first time period, the time length of the current time period is the time interval, one time period is selected as the second time period before the first time period, for example, the current time period is period 3, that is, the first period is period 3, a period may be determined as the second period in period 1, period 2 and the previous periods before the current period 3, for example, yesterday period 3 may be selected as the second period.

If the first time ratio is greater than or equal to the preset ratio, the first preset time length before the current time period is taken as the first time period, the first preset time length may be equal to the time length of the time interval, and the manner of determining the second time period may refer to the manner.

As another embodiment, it is determined whether the current time period matches a preset time period, and if the current time period matches the preset time period, the current time period is taken as a first time period, and a time period before the first time period and matching the preset time is taken as a second time period, where the time length of the second preset time period is equal to the time length of the preset time period. If not, taking the time period within a first preset time length before the current time period as the first time period, so that at least part of the time period of the first time period is matched with the preset time period, and taking the time period within a second preset time length before the first time period as the second time period. Then, at this time, the second preset time length is matched with the first preset time length, and the second time period is at least partially matched with the preset time period.

It should be noted that the first time period and the second time period may be adjacent time periods and the time length of the first time period is the same as that of the second time period, as another embodiment, the first time period and the second time period may correspond to the same time of two different time periods, for example, the first time period is 17 to 23 points of 4, 3 and 2018 and the second time period is 17 to 23 points of 4, 2 and 2018, and the time lengths of the two time periods are the same and the corresponding times are the same but belong to different time periods.

S403: a first update amount of a target application program in a first time period is obtained.

S404: and acquiring a second updating amount of the target application program in a second time period.

S405: and acquiring a difference value between the first updating amount and the second updating amount.

S406: and if the difference value meets a preset condition, judging that the target application program belongs to abnormal application.

Considering that the second time period is before the first time period, and when the developer maliciously tampers with the update times of the target application, the first time period is updated more times than the time period before the first time period, in this embodiment of the present application, the first update amount is greater than the second update amount, that is, the difference is greater than a preset value, where the preset value is a positive number, and the preset value may be set according to a requirement, for example, may be ten thousand times.

It should be noted that, for the steps described in detail above, reference may be made to the foregoing embodiments, and details are not described herein.

In addition, the electronic device may obtain an update amount of each application program in each predetermined time period, where the predetermined time period is a date, that is, counted once every 24 hours, that is, every day 00:00 to 23:59 is divided into a predetermined time period, and then the first time period and the second time period may be selected according to the predetermined time period, specifically, referring to fig. 5, the embodiment of the present application provides a data processing method, which may be applied to the electronic device and may also be applied to a server, and in the embodiment of the present application, the method is applied to a client of the electronic device, and specifically, the method includes: s501 to S508.

S501: and determining the current date to which the current time point belongs.

Specifically, an update record of each application program is stored in the electronic device or the server, and the update record is used for storing a plurality of predetermined time periods and the number of updates corresponding to each predetermined time period, for example, the update record is shown in table 1:

TABLE 1

Application identification	Predetermined period of time	Number of updates
APP1	4 and 3 months in 2018	100
APP1	4 month and 4 days 2018	200
APP1	4 and 5 months in 2018	150
APP1	4 and 6 months in 2018	500

Each predetermined time period corresponds to a date, and specifically, the time period from 0 am of the date to 23 rd and 59 th of the day corresponds to a time period.

After the current time point is determined, a predetermined time period corresponding to the current time point, that is, a corresponding current date can be determined, for example, if the current time point is 2018, 4/month, 7/day 15:40, the current date corresponding to the current time point is 2018, 4/month, 7/day.

S502: and judging whether the current time point meets a preset time condition or not.

Specifically, since the current time point may have been located in a time period later than the current date, i.e., the current time point indicates that the current date is about to elapse, the counted number of updates in the time period under the current date, i.e., between 0 and the current time point of the current date, can largely represent the number of updates of the current date, whereas if the current time point is earlier, i.e., the current time point indicates that the current date starts soon, the counted number of updates in the time period under the current date, i.e., between 0 and the current time point of the current date, is only a fraction of the number of updates at the end of the current date.

Therefore, in view of the above reasons, a preset time condition is set, and whether the current time point satisfies the preset time condition is determined, the preset time condition may be a time range, if the current time point is within the time range, S503 is executed, if the current time point is outside the time range, S504 is executed, specifically, if the preset time condition may be a preset time, a specific embodiment of determining that the current time point satisfies the preset time condition may be: judging whether the current time point is behind a preset time or not; if the current time point is behind a preset time, judging that the current time point meets a preset time condition; and if the current time point is before or equal to the preset time, judging that the current time point does not meet the preset time condition.

The preset time may be a time point set by a user, and is generally a time point in a later time period of a day, for example, a plurality of time periods set according to the time interval described above, a time point in the last time period is selected as the preset time, for example, the time interval is 4 hours, the last time period is 20: 00 to 23:59, and a time point in the last time period is selected as the preset time, for example, 22: 00.

S503 is performed assuming that the current time point is after 22: 00, and S504 is performed if the current time point is before 22: 00 or equal to 22: 00.

S503: and taking the time period corresponding to the current date as a first time period, and taking the time period corresponding to the previous date of the first time period as a second time period.

Specifically, taking a specific embodiment of determining whether the current time point meets the preset time condition as an example, for determining whether the current time point is located after the preset time, for example, if the current date corresponding to the current time point is 2018, 4 and 7 days, if the current time point is located after the preset time, the first time period is a time period corresponding to 2018, 4 and 7 days, that is, 0 point 0 to 23 point 59 points of 2018, 4 and 7 days, the previous date of the current date is 2018, 4 and 6 days, the time period corresponding to the previous date of the current date is 0 point 0 to 23 point 59 points of 2018, 4 and 6 days, and the second time period is 0 point 0 to 23 point 59 points of 2018, 4 and 6 days.

S504: and taking a time period corresponding to a date before the current time period as a first time period, and taking a time period corresponding to a date before the first time period as a second time period.

Similarly, taking a specific embodiment of determining whether the current time point meets the preset time condition as an example, if the current date corresponding to the current time point is 2018, 4 and 7 days, if the current time point is located before or equal to the preset time, the previous date of the current date is 2018, 4 and 6 days, the previous date of the current date corresponds to a time period from 0 point 0 to 23 point 59 of 2018, 4 and 6 days, the first time period is from 0 point 0 to 23 point 59 of 2018, 4 and 6 days, and the previous date of the first time period is 2018, 4 and 5 days, the previous date corresponds to a time period from 0 point 0 to 23 point 59 of 2018, 4 and 5 days, and the second time period is from 0 point 0 to 23 point 59 of 2018, 4 and 5 days.

S505: a first update amount of a target application program in a first time period is obtained.

If the current time point does not meet the preset time condition, the time period corresponding to the current date is taken as the first time period, when the first update amount is acquired, because the current time point is not the end point of the current date, namely the current date is not ended yet, the update amount between the current time point and the end point of the current date needs to be continuously counted, for example, the current time point is 22 points and 20 minutes, the update amount between 0 point and 22 points and 20 minutes in the early morning of the current date is recorded, and the update amount between 22 points and 20 minutes and 23 points and 59 minutes of the current date needs to be continuously counted, so that the update amount is integrated into the first update amount.

And if the first time period is the time period corresponding to the previous date of the current date, the first updating amount is obtained from the updating record shown in the table 1.

S506: and acquiring a second updating amount of the target application program in a second time period.

And the second updated variable for the second time period may be obtained from the updated record shown in table 1 above.

Specifically, the update record may be stored in the electronic device, or may be stored in the server shown in fig. 1, in this embodiment, the update record is stored in the server, and if the electronic device needs to obtain the update amount in a certain time period, the electronic device may send an update amount obtaining request to the server, where the update amount obtaining request includes the identifier of the target application program, the start point and the end point of the time period.

For example, if the first time period is from 0 point 0 to 23 point 59 of 2018, 4, 5 and 5 days, the starting point of the first time period is from 0 point 0 of 2018, 4, 5 and the ending point of the first time period is from 23 point 59 of 2018, 4, 5 and 5 days, the electronic device obtains the first update amount by packaging the starting point of the first time period, the ending point of the first time period and the identifier of the target application into a first update amount obtaining request, sending the first update amount obtaining request to the server, analyzing the first update amount obtaining request by the server to obtain the starting point of the first time period, the ending point of the first time period and the identifier of the target application, finding the update record corresponding to the identifier of the target application according to the identifier of the target application, determining the first time period at the starting point of the first time period and the ending point of the first time period, and thus obtaining the update amount corresponding to the first time period in the update record as the first update amount, and returning to the client of the electronic equipment so that the client of the electronic equipment acquires the first update quantity of the first time period.

S507: and acquiring a difference value between the first updating amount and the second updating amount.

S508: and if the difference value meets a preset condition, judging that the target application program belongs to abnormal application.

In addition, considering that the update amount of the target application program is greatly increased when the new version is released, and the update amount is in a decreasing trend after the new version is greatly increased by taking a time point when the new version is released as a starting point, when the first time period is determined, the update time of the target application program needs to be avoided, so that the detected result is more accurate, specifically, referring to fig. 6, the present application provides a data processing method, which may be applied to an electronic device or a server. S601 to S608.

S601: a first time period is determined according to a current time point.

Specifically, the implementation of determining the first time period may refer to the foregoing embodiments, and is not described herein again. Specifically, a time period of a date before the current date corresponding to the current time point is taken as an example.

S602: and judging whether the first time period meets a preset statistical standard or not.

For example, if the preset statistical criterion is a preset time period, the specific implementation of determining whether the first time period meets the preset statistical criterion may be to determine whether the first time period matches the preset time period, where the specific implementation of the preset time period may refer to the foregoing embodiments and is not described herein again.

As another embodiment, in consideration of avoiding that the statistics of the first update amount is affected by the release of the new version of the target application, a specific embodiment of determining whether the first time period meets the preset statistical criteria may be to determine whether the target application releases the new version within the first time period, and if the target application does not release the new version within the first time period, determine that the first time period meets the preset statistical criteria, and then execute S603. And if the target application program has a release new version in the first time period, judging that the first time period does not meet the preset statistical standard, returning to execute the step S601 again, namely, re-determining the first time period. For example, the release time of the new version of the target application is 02: 00 of 2018, 4, 7 and 7, and the first time period is a time period corresponding to 2018, 4, 7 and 7, that is, 00: 23:59 of 2018, 4, 7 and 7, and if the new version is released in the first time period, that is, the preset statistical criteria are not met, the first time period needs to be determined again.

As another embodiment, the manner of determining the first time period may also be that a time point at which the new version of the target application is released last time is determined as a specified time starting point, and a time period between the specified time starting point and the current time point is used as a reference time period, and a time period is selected as the first time period within the reference time period, and then the manner of selecting the first time period may refer to the above embodiment, but the starting point of the first time period may not be earlier than the specified time starting point.

S603: and acquiring a first updating amount of the target application program in the first time period.

In addition, the target application may be determined by detecting, by the client of the electronic device, an update amount of each application, and taking, as the target application, an application whose update amount exceeds a preset value within a specified time period, where the specified time period may be a time period set by a user, for example, the specified time period is a date, and then detecting, by the client of the electronic device, the number of updates of all applications per day, and taking, as the target application, an application whose update number exceeds a preset value.

S604: and dividing a plurality of sub-time periods according to a preset time interval in a preset time period before the first time period.

The preset time period before the first time period may be set by determining a time point at which the last new version of the target application program is released, that is, the specified time starting point, and taking a time period between the specified time starting point and the time starting point of the first time period as the preset time period before the first time period. In one embodiment, the duration of the predetermined time interval is the same as the duration of the first time period. A plurality of time periods divided by a preset time period before the first time period according to a preset time interval are taken as a plurality of sub-time periods.

S605: and acquiring the sub-update quantity of the target application program in each sub-period.

Specifically, the sub-update amount of the target application program corresponding to each sub-time period is searched according to the update record, and then the sub-update amount of the target application program in each sub-time period is obtained.

S606: and determining a second updating amount from all the sub-updating amounts, wherein the sub-time period corresponding to the second updating amount is a second time period.

After the sub-update amounts in all the sub-time periods of the target application program are obtained, one sub-update amount is determined from all the sub-update amounts as the second update amount of the target application program, as an implementation manner, all the sub-update amounts may be sorted according to size, the sub-update amount with the largest update amount is searched as the second update amount, and since each sub-update amount corresponds to one sub-time period, the sub-time period corresponding to the searched sub-update amount is called as the second time period. In addition, the lowest sub-update amount among all the sub-update amounts may be selected as the second update amount, and the sub-period corresponding to the lowest sub-update amount is taken as the second period in the same manner.

S607: and acquiring a difference value between the first updating amount and the second updating amount.

S608: and if the difference value meets a preset condition, judging that the target application program belongs to abnormal application.

Therefore, under the condition that no new version is released currently, if the difference value between the first update amount of the target application program in the first time period and the second update amount of the target application program in the second time period is greater than the preset value, it can be determined that the update amount of the target application program is abnormal, and the application program belongs to an abnormal application program. For example, when the first time period is yesterday, and the second time period is the previous day, an application program having an update amount exceeding a preset value is selected as the target application program, and for example, an application program having no update but having an update amount of yesterday exceeding 10000 times is selected as the target application program, and then, when a difference between the update amount of yesterday and the update amount of previous day is greater than 10000 times, it is determined that the update amount of the target application program is abnormal, and the target application program belongs to an abnormal application program.

In addition, since the client has a function of pushing an application, a black list and a white list may be set, so that when the application is pushed, the application in the white list is normally pushed and the application in the black list may be pushed according to a pushing policy, specifically, referring to fig. 7, an embodiment of the present application provides a data processing method, which may be applied to an electronic device or a server, and in the embodiment of the present application, the method is applied to the client of the electronic device, specifically, the method includes: s701 to S707.

S701: a first update amount of a target application program in a first time period is obtained.

S702: and acquiring a second updating amount of the target application program in a second time period.

S703: and acquiring a difference value between the first updating amount and the second updating amount.

S704: and judging whether the difference value is a preset condition or not.

S705: and determining that the target application program belongs to abnormal application.

If the difference value satisfies the preset condition, it is determined that the target application program belongs to an abnormal application, and if the difference value does not satisfy the preset condition, S707 is executed.

S706: and writing the identification of the target application program into a blacklist.

S707: and judging that the target application program belongs to normal application, and writing the identifier of the target application program into a white list.

Specifically, if the difference value meets a preset condition, writing the identifier of the application program into a blacklist, and if the difference value does not meet the preset condition, writing the identifier of the application program into a whitelist. The application program is not displayed or displayed later in an application pushing interface of the client, or the application program identifier in the blacklist cannot be pushed when the application program is pushed to a user of the client through a card. While applications in the white list can be pushed normally.

As an embodiment, the above-mentioned blacklist and whitelist may be stored in a server, and after determining that the target application is an abnormal application, the client sends a blacklist storage instruction to the server, where the blacklist storage instruction includes an identifier of the target application and is used to instruct the server to store the identifier of the target application in a blacklist of the server.

In addition, after the target application program is judged to belong to the normal application, a white list storage instruction is sent to the server, wherein the white list storage instruction comprises the identification of the target application program and is used for instructing the server to store the identification of the target application program in a white list of the server.

Furthermore, after writing the identifier of the target application program into a white list or writing the identifier of the target application program into a black list, the method further includes: and detecting whether an application pushing request is acquired.

The application push request may be a request sent by a user when the user operates an interface of a client, for example, when the user opens an application push interface, the application push request input by the user is acquired, if a blacklist and a whitelist are stored in the electronic device, the electronic device executes an operation of acquiring an identifier of an application program to be recommended according to the blacklist and the whitelist, and if the blacklist and the whitelist are stored in the server, the electronic device sends the application push request to the server, where the application push request is used to instruct the server to execute an operation of acquiring the identifier of the application program to be recommended according to the blacklist and the whitelist and returning the identifier of the application program to be recommended to the electronic device.

The operation of acquiring the identifier of the application program to be recommended according to the blacklist and the white list is executed as follows: and selecting the identifier of the application program to be recommended from the white list to display in an application push interface, and canceling the display of the identifier of the application program in the black list in the application push interface.

As an embodiment, taking the case that the black list and the white list are stored in the server, the manner of selecting the identifier of the application to be recommended in the white list is to obtain the push coefficient of each application according to the update time and the download time corresponding to each application, for example, Y ═ W1 × G + W2 × Q, as an embodiment, W1 is 0.4, W2 is 0.6, G is the update time, and Q is the download time.

The identified push times for each application are ordered from high to low to obtain a push sequence. For example, the push sequence is [ APP1, APP2, APP4, APP7, APP5, APP10, APP9, APP8], and the sizes of the push coefficients are sequentially reduced. And after the push sequence is acquired, selecting the identifier meeting the conditions from the push sequence as the identifier of the application program to be recommended. As an embodiment, the identifier of the application program ranked the top in the push sequence is selected as the identifier of the application program to be recommended.

The server sends a push instruction to the client, the push instruction comprises an identifier of the application program to be recommended, after the client acquires the push instruction, the client analyzes the instruction to acquire the identifier of the application program to be recommended, and the identifier of the application program to be recommended is displayed in a preset area of an application push interface of the client.

The obtained identification of the application program to be recommended comes from the application programs in the white list and is not obtained from the identification of the application programs in the black list, so that the identification of the application programs in the black list can be prevented from being displayed in an application push interface of the client.

Referring to fig. 8, a block diagram of a data processing apparatus according to an embodiment of the present disclosure is shown. The data processing apparatus may include: a first acquisition unit 801, a second acquisition unit 802, a third acquisition unit 803, and a determination unit 804.

A first obtaining unit 801, configured to obtain a first update amount of a target application program in a first time period.

A second obtaining unit 802, configured to obtain a second update amount of the target application program in a second time period.

A third obtaining unit 803, configured to obtain a difference between the first update amount and the second update amount.

A determining unit 804, configured to determine that the target application program belongs to an abnormal application if the difference satisfies a preset condition.

It can be clearly understood by those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described apparatuses and modules may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.

Referring to fig. 9, a block diagram of a data processing apparatus according to an embodiment of the present application is shown. The data processing apparatus may include: a determination unit 901, a first acquisition unit 902, a second acquisition unit 903, a third acquisition unit 904, and a determination unit 905.

A determining unit 901, configured to determine a first time period according to a current time point; and determining a second time period according to the first time period.

Specifically, the determining unit 901 is further configured to determine a current time period to which the current time point belongs; taking a time period within a first preset time length before the current time period as a first time period; and taking a time period within a second preset time length before the first time period as a second time period.

The determining unit 901 is further configured to determine a current time period to which the current time point belongs; taking the current time period as a first time period; and taking a time period within a third preset time length before the first time period as a second time period.

The determining unit 901 is further configured to determine a current date to which the current time point belongs; judging whether the current time point meets a preset time condition or not; and if the preset time condition is met, taking the time period corresponding to the current date as a first time period, and taking the time period corresponding to the previous date of the first time period as a second time period. And if the preset time condition is not met, taking a time period corresponding to a date before the current time period as a first time period, and taking a time period corresponding to a date before the first time period as a second time period. The specific implementation manner of judging whether the current time point meets the preset time condition is as follows: judging whether the current time point is behind a preset time or not; if the current time point is behind a preset time, judging that the current time point meets a preset time condition; and if the current time point is before or equal to the preset time, judging that the current time point does not meet the preset time condition.

A first obtaining unit 902, configured to obtain a first update amount of a target application program in a first time period.

Specifically, the first obtaining unit 902 is further configured to determine a first time period according to the current time point; judging whether the first time period meets a preset statistical standard or not; and if so, acquiring a first updating amount of the target application program in the first time period. The first time period satisfying a preset statistical criterion includes: and in the first time period, the target application program does not release the new version.

A second obtaining unit 903, configured to obtain a second update amount of the target application program in a second time period.

Specifically, the second obtaining unit 903 is further configured to divide a plurality of sub-time periods according to a preset time interval in a preset time period before the first time period; acquiring the sub-update quantity of the target application program in each sub-time period; and determining a second updating amount from all the sub-updating amounts, wherein the sub-time period corresponding to the second updating amount is a second time period. The determining a second update amount from all the sub-update amounts comprises: among all the sub-update amounts, the lowest sub-update amount is selected as the second update amount.

The first time period is adjacent to the second time period and has the same time length.

A third obtaining unit 904, configured to obtain a difference between the first update amount and the second update amount.

The second time period is located before the first time period, the difference is larger than a preset value, the preset value is a positive number, and the preset value is ten thousand times.

A determining unit 905, configured to determine that the target application program belongs to an abnormal application if the difference satisfies a preset condition.

The system further comprises a storage unit, a processing unit and a processing unit, wherein the storage unit is used for writing the identification of the target application program into a blacklist; and if the difference value does not meet the preset condition, judging that the target application program belongs to normal application, and writing the identifier of the target application program into a white list.

The system further comprises a pushing unit, which is used for detecting whether an application pushing request is acquired; and if the application program identifier is acquired, selecting the identifier of the application program to be recommended from the white list to display in an application push interface, and canceling the display of the identifier of the application program in the black list in the application push interface.

In the several embodiments provided in the present application, the coupling between the modules may be electrical, mechanical or other type of coupling.

In addition, functional modules in the embodiments of the present application may be integrated into one processing module, or each of the modules may exist alone physically, or two or more modules are integrated into one module. The integrated module can be realized in a hardware mode, and can also be realized in a software functional module mode.

Referring to fig. 10, a block diagram of an electronic device according to an embodiment of the present application is shown. The electronic device 100 may be a smart phone, a tablet computer, an electronic book, or other electronic devices capable of running an application. The electronic device 100 in the present application may include one or more of the following components: a processor 110, a memory 120, and one or more applications, wherein the one or more applications may be stored in the memory 120 and configured to be executed by the one or more processors 110, the one or more programs configured to perform a method as described in the aforementioned method embodiments.

Processor 110 may include one or more processing cores. The processor 110 connects various parts within the overall electronic device 100 using various interfaces and lines, and performs various functions of the electronic device 100 and processes data by executing or executing instructions, programs, code sets, or instruction sets stored in the memory 120 and calling data stored in the memory 120. Alternatively, the processor 110 may be implemented in hardware using at least one of Digital Signal Processing (DSP), Field-Programmable Gate Array (FPGA), and Programmable Logic Array (PLA). The processor 110 may integrate one or more of a Central Processing Unit (CPU), a Graphics Processing Unit (GPU), a modem, and the like. Wherein, the CPU mainly processes an operating system, a user interface, an application program and the like; the GPU is used for rendering and drawing display content; the modem is used to handle wireless communications. It is understood that the modem may not be integrated into the processor 110, but may be implemented by a communication chip.

The Memory 120 may include a Random Access Memory (RAM) or a Read-Only Memory (Read-Only Memory). The memory 120 may be used to store instructions, programs, code sets, or instruction sets. The memory 120 may include a stored program area and a stored data area, wherein the stored program area may store instructions for implementing an operating system, instructions for implementing at least one function (such as a touch function, a sound playing function, an image playing function, etc.), instructions for implementing various method embodiments described below, and the like. The data storage area may also store data created by the electronic device 100 during use (e.g., phone book, audio-video data, chat log data), and the like.

Referring to fig. 11, a block diagram of a computer-readable storage medium according to an embodiment of the present application is shown. The computer-readable medium 1100 has stored therein program code that can be called by a processor to perform the method described in the above-described method embodiments.

The computer-readable medium 1100 may be an electronic memory such as a flash memory, an EEPROM (electrically erasable programmable read only memory), an EPROM, a hard disk, or a ROM. Alternatively, the computer-readable storage medium 1100 includes a non-volatile computer-readable storage medium. The computer readable storage medium 1100 has storage space for program code 1110 for performing any of the method steps of the method described above. The program code can be read from or written to one or more computer program products. The program code 1110 may be compressed, for example, in a suitable form.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present application, and not to limit the same; although the present application has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; such modifications and substitutions do not necessarily depart from the spirit and scope of the corresponding technical solutions in the embodiments of the present application.

Claims

A data processing method, comprising:

acquiring a first updating amount of a target application program in a first time period;

acquiring a second updating amount of the target application program in a second time period;

acquiring a difference value between the first updating amount and the second updating amount;

and if the difference value meets a preset condition, judging that the target application program belongs to abnormal application.
The method of claim 1, wherein obtaining the first amount of updates for the target application within the first time period further comprises:

determining a first time period according to the current time point;

and determining a second time period according to the first time period.
The method of claim 2, wherein determining the first time period according to the current time point and determining the second time period according to the first time period comprises:

determining a current time period to which the current time point belongs;

taking a time period within a first preset time length before the current time period as a first time period;

and taking a time period within a second preset time length before the first time period as a second time period.
The method of claim 2, wherein determining the first time period according to the current time point and determining the second time period according to the first time period comprises:

determining a current time period to which the current time point belongs;

taking the current time period as a first time period;

and taking a time period within a third preset time length before the first time period as a second time period.
The method of claim 2, wherein determining the first time period according to the current time point and determining the second time period according to the first time period comprises:

determining the current date to which the current time point belongs;

judging whether the current time point meets a preset time condition or not;

and if the preset time condition is met, taking the time period corresponding to the current date as a first time period, and taking the time period corresponding to the previous date of the first time period as a second time period.
The method of claim 5, further comprising:

and if the preset time condition is not met, taking a time period corresponding to a date before the current time period as a first time period, and taking a time period corresponding to a date before the first time period as a second time period.
The method according to claim 5 or 6, wherein the determining whether the current time point meets a preset time condition comprises:

judging whether the current time point is behind a preset time or not;

if the current time point is behind a preset time, judging that the current time point meets a preset time condition;

and if the current time point is before or equal to the preset time, judging that the current time point does not meet the preset time condition.
The method of any one of claims 2-7, wherein the first time period is adjacent to the second time period and has the same length of time.
The method of claim 1, wherein the second time period is before the first time period, and wherein the difference satisfying a preset condition comprises:

the difference is greater than a preset value, and the preset value is a positive number.
The method of claim 9, wherein the predetermined value is ten thousand times.
The method of claim 1, wherein obtaining the second amount of updates of the target application during the second time period comprises:

dividing a plurality of sub-time periods according to a preset time interval in a preset time period before the first time period;

acquiring the sub-update quantity of the target application program in each sub-time period;

and determining a second updating amount from all the sub-updating amounts, wherein the sub-time period corresponding to the second updating amount is a second time period.
The method of claim 11, wherein determining the second update amount from all of the sub-update amounts comprises:

among all the sub-update amounts, the lowest sub-update amount is selected as the second update amount.
The method of any of claims 1-12, wherein obtaining the first update amount for the target application during the first time period comprises:

determining a first time period according to the current time point;

judging whether the first time period meets a preset statistical standard or not;

and if so, acquiring a first updating amount of the target application program in the first time period.
The method of claim 13, wherein the first period of time meeting a predetermined statistical criteria comprises:

and in the first time period, the target application program does not release the new version.
The method according to any one of claims 1-14, wherein after determining that the target application program belongs to an abnormal application, further comprising:

and writing the identification of the target application program into a blacklist.
The method of claim 15, further comprising:

and if the difference value does not meet the preset condition, judging that the target application program belongs to normal application, and writing the identifier of the target application program into a white list.
The method of claim 16, wherein after writing the identification of the target application to a whitelist, further comprising:

detecting whether an application push request is acquired;

and if the application program identifier is acquired, selecting the identifier of the application program to be recommended from the white list to display in an application push interface, and canceling the display of the identifier of the application program in the black list in the application push interface.
A data processing apparatus, comprising:

a first acquisition unit, configured to acquire a first update amount of a target application program in a first time period;

a second obtaining unit, configured to obtain a second update amount of the target application program in a second time period;

a third obtaining unit configured to obtain a difference between the first update amount and the second update amount;

and the judging unit is used for judging that the target application program belongs to abnormal application if the difference value meets a preset condition.
An electronic device, comprising:

one or more processors;

a memory;

one or more applications, wherein the one or more applications are stored in the memory and configured to be executed by the one or more processors, the one or more programs configured to perform the method of any of claims 1-17.
A computer-readable storage medium having program code stored therein, the program code being invoked by a processor to perform the method of any one of claims 1 to 17.