CN106557306B

CN106557306B - Method, device and equipment for determining application package matching path

Info

Publication number: CN106557306B
Application number: CN201510629277.5A
Authority: CN
Inventors: 王俊豪
Original assignee: Beijing Kingsoft Internet Security Software Co Ltd
Current assignee: Beijing Kingsoft Internet Security Software Co Ltd
Priority date: 2015-09-28
Filing date: 2015-09-28
Publication date: 2020-05-05
Anticipated expiration: 2035-09-28
Also published as: CN106557306A

Abstract

The embodiment of the invention discloses a method, a device and equipment for determining a matching path of an application program package. The method comprises the steps of obtaining information data which are uploaded by a plurality of terminals and are associated with the writing action of the application program package; counting the number of terminals of a path containing the writing of the application program package from the information data; judging whether the counted number of the terminals reaches a first preset threshold value or not; or counting the number of files in a path written by the application program corresponding to the application program package from the information data; judging whether the counted number of the files reaches a second preset threshold value or not; and determining the matching relation between the application program package and the path according to the judgment result. By adopting the embodiment of the invention, the paths matched with the application program package can be more accurately and comprehensively counted, and the misjudgment probability of the unloading residual path is reduced.

Description

Method, device and equipment for determining application package matching path

Technical Field

The invention relates to the technical field of terminals, in particular to a method, a device and equipment for determining an application program package matching path.

Background

The current terminal can be installed with various types of applications, and can also carry out operations such as uninstalling the applications according to the requirements of users. When a certain application is unloaded, a terminal has a plurality of unloading residual paths associated with the application, when the unloading residual paths need to be further cleaned, whether the current paths needing to be cleaned are the unloading residual paths or not needs to be judged firstly, application packages corresponding to the current paths needing to be cleaned in the residual definition feature table are inquired from a server usually, whether the application packages corresponding to the paths needing to be cleaned are all deleted or not is judged, and if the judgment result is yes, the current paths needing to be cleaned are the unloading residual paths.

Usually, the server establishes a residual feature database according to the information data reported by the terminal, that is, determines a specific application packet corresponding to a certain path. However, the current server determines that the manner of the application packet corresponding to the path is not accurate enough, and if an application packet actually has a behavior of reading and writing the path, but the number of terminals reporting the behavior is small or does not reach a threshold, the server cannot count the corresponding relationship between the application packet and the path, so that a packet missing phenomenon occurs in the counted residual feature database, and the terminal may misjudge the path as an unloading residual path according to the residual feature database of the missing packet. If the terminal deletes the misjudged path, the normal operation of the application program may be influenced.

Disclosure of Invention

The embodiment of the invention provides a method, a device and equipment for determining an application program package matching path. By adopting the embodiment of the invention, the paths matched with the application program package can be more accurately and comprehensively counted, and the misjudgment probability of the unloading residual path is reduced.

The first aspect of the embodiment of the invention provides a method for determining a matching path of an application package. The method may comprise the steps of:

acquiring information data which is uploaded by a plurality of terminals and is associated with the writing behavior of the application program package;

counting the number of terminals of a path containing the writing of the application program package from the information data;

judging whether the counted number of the terminals reaches a first preset threshold value or not; or

Counting the number of files in a path written by an application program corresponding to the application program package from the information data;

judging whether the counted number of the files reaches a second preset threshold value or not;

and determining the matching relation between the application program package and the path according to the judgment result.

As an alternative embodiment, the acquiring information data associated with the writing behavior of the application package and uploaded by multiple terminals includes:

and acquiring information data which are uploaded by a plurality of terminals and are associated with the writing behavior of the application program package in a preset time period, wherein the preset time period comprises N unit time intervals.

As an optional embodiment, the counting the number of terminals including the path written by the application package from the information data includes:

counting the number of terminals of a path written by the application program package in each unit time interval from the information data;

screening out the maximum value of the number of the terminals from the number of the terminals counted in each unit time interval;

wherein, the judging whether the counted number of the terminals reaches a first preset threshold value includes:

and judging whether the maximum value of the number of the terminals reaches a first preset threshold value.

As an optional embodiment, the counting the number of files in the path written by the application program corresponding to the application program package from the information data includes:

counting the number of files in a path written by the application program corresponding to the application program package in each unit time interval from the information data;

screening out the maximum value of the number of the files from the number of the files in each unit time interval;

wherein, the judging whether the counted file number reaches a second preset threshold includes:

and judging whether the maximum value of the file number reaches a second preset threshold value.

As an optional embodiment, the determining, according to the determination result, a matching relationship between the application package and the path includes:

and if the maximum value of the number of the terminals is judged to be not smaller than a first preset threshold value or the maximum value of the number of the files is judged to be not smaller than a second preset threshold value, determining that the application program package is matched with the path.

As an optional embodiment, the method further comprises:

if the maximum value of the number of the terminals is smaller than a first preset threshold value and the maximum value of the number of the files is smaller than a second preset threshold value, counting the occurrence frequency of the behavior of the writing path of the application program package or the behavior of the writing path of the application program corresponding to the application program package;

judging whether the occurrence frequency reaches a third preset threshold value;

and if the judgment result is yes, determining that the application program package is matched with the path.

As an optional embodiment, the counting the occurrence frequency of the behavior of the application package writing path or the behavior of the application package writing path corresponding to the application package includes:

accumulating the occurrence times of the application program package writing path behavior or the behavior of the application program writing path corresponding to the application program package in the preset time period;

and calculating the occurrence frequency according to the preset time period and the occurrence times.

As an optional embodiment, the method further comprises:

inquiring feature information corresponding to the path in a residual feature database;

and if the characteristic information corresponding to the path does not contain the application program package, identifying the characteristic information.

As an optional embodiment, the method further comprises:

and sending early warning information according to the identified characteristic information.

The second aspect of the embodiment of the present invention provides a device for determining a matching path of an application package. The apparatus may include the following modules:

the acquisition module is used for acquiring information data which are uploaded by a plurality of terminals and are associated with the writing behaviors of the application program package;

the first statistical module is used for counting the number of terminals containing the path written by the application program package from the information data;

the first judging module is used for judging whether the counted number of the terminals reaches a first preset threshold value or not; or

The second counting module is used for counting the number of files in a path written by the application program corresponding to the application program package from the information data;

the second judgment module is used for judging whether the counted number of the files reaches a second preset threshold value or not;

and the determining module is used for determining the matching relationship between the application program package and the path according to the judgment result of the first judging module or the second judging module.

As an optional embodiment, the obtaining module is further configured to:

As an alternative embodiment, the first statistical module comprises:

a first statistical unit, configured to count, from the information data, the number of terminals in a path in which the application packet is written in each unit time interval;

the first screening unit is used for screening the maximum value of the number of the terminals from the number of the terminals counted in each unit time interval;

wherein the first judging module is further configured to:

As an optional embodiment, the second statistical module includes:

a second counting unit, configured to count, from the information data, the number of files in a path written by an application program corresponding to the application program package in each unit time interval;

the second screening unit is used for screening the maximum value of the number of the files in each unit time interval;

wherein the second judging module is further configured to:

As an optional embodiment, the determining module is further configured to:

As an optional embodiment, the apparatus further comprises:

a third counting module, configured to count occurrence frequency of a behavior of a write path of the application package or a behavior of a write path of an application program corresponding to the application package when the first determining module determines that the maximum value of the number of terminals is smaller than a first preset threshold and the second determining module determines that the maximum value of the number of files is smaller than a second preset threshold;

the third judging module is used for judging whether the occurrence frequency reaches a third preset threshold value;

wherein the determining module is further configured to:

and if the judgment result of the third judgment module is yes, determining that the application program package is matched with the path.

As an alternative embodiment, the third statistical module includes:

the accumulation unit is used for accumulating the occurrence times of the application program package writing path behavior or the behavior of the application program writing path corresponding to the application program package in the preset time period;

and the calculating unit is used for calculating the occurrence frequency according to the preset time period and the occurrence times.

As an optional embodiment, the apparatus further comprises:

the query module is used for querying the characteristic information corresponding to the path in a residual characteristic database after the determining module determines that the application program package matches the path;

and the identification module is used for identifying the characteristic information when the characteristic information corresponding to the path is inquired by the inquiry module and does not contain the application program package.

As an optional embodiment, the apparatus further comprises:

and the sending module is used for sending early warning information according to the characteristic information identified by the identification module.

A third aspect of an embodiment of the present invention provides an apparatus, including at least a transceiver, a memory, and a processor, where:

the transceiver is used for carrying out data transmission with the front end or the rear end;

the memory is for storing a set of program code, and the processor calls the program code for:

In the embodiment of the invention, the information data associated with the writing behaviors of the application program packages uploaded by the plurality of terminals is acquired, the number of the terminals of the writing paths of the application program packages or the number of the files in the writing paths of the application program packages corresponding to the application program packages can be summarized and counted from the information data, and the matching relationship between the application program packages and the corresponding paths is determined by judging whether the number of the terminals or the number of the files respectively reach the preset threshold value, so that the paths matched with the application program packages can be more accurately and comprehensively counted, and the misjudgment probability of the unloading residual paths is reduced.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings needed to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without inventive labor.

FIG. 1 is a flow diagram of one embodiment of a method for determining a matching path for an application package in the present invention;

FIG. 2 is a flow diagram of another embodiment of a method for determining a matching path for an application package in the present invention;

FIG. 3 is a schematic structural diagram of an embodiment of an apparatus for determining a matching path of an application package according to the present invention;

FIG. 4 is a schematic structural diagram of another embodiment of the apparatus for determining a matching path of an application package in the present invention;

fig. 5 is a schematic structural diagram of an embodiment of an apparatus in the present invention.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

Embodiments of the present invention are described below with reference to the drawings. The device or the equipment in the embodiment of the present invention may include equipment capable of processing and storing data, such as a server, and may be connected to the front end terminal and the back end equipment through a network.

Fig. 1 is a flowchart of an embodiment of a method for determining a matching path of an application package according to the present invention. The method of the embodiment of the invention can be correspondingly realized by the device. The method may include the following steps.

And step S101, acquiring information data which is uploaded by a plurality of terminals and is associated with the writing behavior of the application program package.

In one embodiment, the write behavior of the application package may be monitored by placing a buried point at the terminal. One of the situations is that when the terminal monitors a behavior of writing a file in any application package under a path, information data associated with the behavior, such as a package name of the application package, a path name of the path corresponding to the writing, a written file name, a file header and other information data, can be acquired. The information data can be reported to the server periodically through the network or according to the acquisition request of the server, and when the information data is reported to the server, the information data can also comprise information such as terminal identification and the like. The server can store information data related to any application package writing behavior reported by the terminals, wherein the writing behavior of the application package can include a path written by the application package when the application package is installed, and the path is a standard path in general, for example, the application package is written into/android/data of the user terminal; the application program package is installed under a user terminal/android/data path, the writing behavior of the application program package can also include a behavior of writing a path of an application program corresponding to the application program package during running, wherein the path can be a path selected by a user, that is, the path is not a standard path generally, for example, files such as pictures or audios and videos downloaded during running of the application program can be written into the path selected by the user, if the user does not select the path, the path written by the application program can be the same as the path written by the application program package, and the path is a default writing path, that is, the path in which the files can be written by the application program package during running of the application program can be written into the application program package, and can also be written into other paths.

Step S102, counting the number of terminals of the path written by the application program package from the information data.

In one embodiment, after the information data associated with the writing behavior of the application package is obtained, the number of terminals including the path written by the application package can be counted from the information data. The path written by the application package is an application package installation path, and is usually a standard path in the user terminal, because of the uniqueness of the installation path in the terminal, when the information data of the behavior written by the application package into the path is counted, the number of terminals monitoring the behavior written by the application package into the path can be counted, namely the application package is monitored to be installed under the path in the terminal, so that the matching relationship between the application package and the path can be judged according to the number of the terminals.

Step S103, judging whether the counted number of the terminals reaches a first preset threshold value.

In one embodiment, when the number of terminals of the write path of the application package is counted from the information data, it may be determined whether the counted number of terminals reaches a first preset threshold. The first preset threshold value can be determined according to the downloading amount of the application program and the number of the terminals with the current embedded points, that is, the downloading amount or the popularity of the application program is higher, and the higher the number of the terminals with the current embedded points is, the larger the statistical cardinality is, the higher the first preset threshold value can be set.

And step S104, counting the number of files in the path written by the application program corresponding to the application program package from the information data.

In one embodiment, after the information data associated with the writing behavior of the application package is obtained, the number of files in the path written by the application program corresponding to the application package can be counted from the information data. Specifically, when an application program corresponding to the application package runs, the path file may be written, for example, when the application program needs to write a downloaded file into a certain path of the user terminal, the user terminal may record information data such as an application program name, a file header, a path name, and the like in the behavior when monitoring the behavior, and when a plurality of user terminals record the same behavior, the same behavior means that the application program name and the written path name are the same, and the file characteristics are not required to be the same. The server can count the number of the files written into the path by the application program from the data related to the behavior reported by the user terminal, that is, the server can determine whether the application program is matched with the path by counting the number of the files written into the path by the application program from different user terminals.

The path written by the application program corresponding to the application program package and the path written by the application program package can be the same or different. For example, when the application program writes the downloaded file into a certain path, the downloaded file may be stored into a path selected by the user, or may be stored into a default path, where the default path may be an installation path of the application program, that is, a path into which the application package is written, or may be another default path, and for example, when the application program stores the downloaded picture into the user terminal, the downloaded picture may be written into a sub-path corresponding to the application program identifier in the gallery path of the user terminal.

Step S105, determining whether the counted number of files reaches a second preset threshold.

In an embodiment, when the number of files in the write path of the application program is counted from the information data reported by the plurality of terminals, it may be determined whether the number of files reaches a second preset threshold. The second preset threshold value can be determined according to the number of the user terminals with the buried points and the frequency of writing files into the application program. That is, the higher the frequency of writing files by the application program is, the higher the number of user terminals for setting the buried point is, the larger the base number of statistics is, and the higher the second preset threshold value can be set.

And step S106, determining the matching relation between the application program package and the path according to the judgment result.

In one embodiment, whether the path written by the application package is counted or the path written by the application program corresponding to the application package is counted, the matching relationship between the application package and the path needs to be determined. One application package can be associated with a plurality of paths, and the matching relationship between the application and the associated paths can be judged one by one according to the mode, namely after the application package is unloaded, the matched path can be used as an unloading residual path. Meanwhile, a path may also match multiple associated application packages, and if an application package under the path is uninstalled, the path may not be defined as an uninstall residual path if the path also matches other application packages. If the matching relationship between the path and an application package is not determined in time, when an application program under the path is unloaded and other application packages under the path with the matching relationship are not found, the path which is not the unloading residual path is defined as the downloading residual, namely, the package missing phenomenon occurs. The embodiment of the invention aims to determine the matching relation between the application program package and all paths associated with the application program package, thereby avoiding the package missing phenomenon.

According to the mode, the matching relation between the application program package and the path can be determined according to the judgment result of whether the number of the terminals corresponding to the judged writing behaviors reaches the first preset threshold or whether the number of the files corresponding to the judged writing behaviors reaches the second preset threshold. Specifically, if the number of terminals is not less than a first preset threshold, or the number of files is not less than a second preset threshold, it may be determined that the application package is matched with the path. That is, the more the number of terminals corresponding to the writing behavior is, the greater the matching degree of the application package and the path is, and when the number of terminals reaches the first preset threshold, it may be determined that the application package is matched with the path. Similarly, the more the number of the files corresponding to the writing behavior is, the greater the matching degree of the application program package and the path is, and when the number of the files reaches a second preset threshold, the application program package can be determined to be matched with the path.

In an embodiment, the number of terminals and the number of files may be counted and determined at the same time, or one of the numbers may be selected for determination, and if the number of terminals reaches a first preset threshold, or the number of files reaches a second preset threshold, or both the number of terminals and the number of files satisfy the preset thresholds, it may be determined that the application package matches the corresponding path.

Referring to fig. 2, it is a flowchart of another embodiment of the method for determining a matching path of an application package in the present invention. The method of the embodiment of the invention can be correspondingly realized by the device. The method may include the following steps.

Step S201, obtaining information data associated with a writing behavior of an application package uploaded by a plurality of terminals within a preset time period, where the preset time period includes N unit time intervals.

In one embodiment, the server may obtain information data associated with the writing behavior of the application package uploaded by the plurality of terminals within a preset time period. Such as a preset time period of 1 day, 1 week, etc. The preset time period may include N unit time intervals, where N is an integer and N ≧ 1. And if the preset time period is 1 day and the unit time interval is 1 day, acquiring the information data reported by the terminal on the previous day. If the preset time period is N days and the unit time interval is 1 day, wherein N is greater than 1, the counted information data is a numerical value collection, namely the collection comprises the information data acquired every day.

In one embodiment, the write behavior of the application package may be monitored by placing a buried point at the terminal. One of the situations is that when a behavior of writing a file in a path of any application package is monitored, information data associated with the behavior, such as a package name of the application package, a path name of the path corresponding to the writing, a written file name, a file header and other information data, can be acquired. The information data can be reported to the server periodically through the network or according to the acquisition request of the server, and when the information data is reported to the server, the information data can also comprise information such as terminal identification and the like. The server can store information data related to any application package writing behavior reported by the terminals, wherein the writing behavior of the application package can include a path written by the application package when the application package is installed, and the path is a standard path in general, for example, the application package is written into/android/data of the user terminal; the application program package is installed under a user terminal/android/data path, the writing behavior of the application program package can also include a behavior of writing a path of an application program corresponding to the application program package during running, wherein the path can be a path selected by a user, that is, the path is not a standard path generally, for example, files such as pictures or audios and videos downloaded during running of the application program can be written into the path selected by the user, if the user does not select the path, the path written by the application program can be the same as the path written by the application program package, and the path is a default writing path, that is, the path in which the files can be written by the application program package during running of the application program can be written into the application program package, and can also be written into other paths.

Step S202, counting the number of the terminals of the path written by the application program package in each unit time interval from the information data.

In one embodiment, the number of terminals of the path in which the application package is written per unit time interval may be counted separately from the acquired collection of information data. And if the unit time interval is 1 day and the preset time period is N days, respectively counting the number of terminals of the path written by the application program package every day in the N days. A collection of the terminal number can be counted, wherein the collection includes the terminal number counted each day.

And step S203, screening out the maximum value of the number of the terminals from the number of the terminals counted in each unit time interval.

In one embodiment, after counting the collection of the number of terminals from the information data, the maximum value of the number of terminals may be obtained from the counted number of terminals in each unit time interval. If the unit time interval is 1 day and the preset time period is N days, the number of terminals in the information data related to the behavior reported by the terminal every day is acquired, and N or less terminals can be acquired in N days to form a collection. The maximum value of the number of the N terminals can be screened out, and if the maximum value can reach a first preset threshold value, the application program package can be determined to be matched with the path.

And step S204, judging whether the maximum value of the number of the terminals reaches a first preset threshold value.

In one embodiment, after the maximum value of the number of terminals is screened out, it may be determined whether the counted maximum value of the number of terminals reaches a first preset threshold. The first preset threshold value can be determined according to the downloading amount of the application program and the number of the terminals with the current embedded points, that is, the downloading amount or the popularity of the application program is higher, and the higher the number of the terminals with the current embedded points is, the larger the statistical cardinality is, the higher the first preset threshold value can be set.

Step S205, counting the number of files in the path written by the application program corresponding to the application program package in each unit time interval from the information data.

In one embodiment, the file number of the path written by the application program corresponding to the application program package in each unit time interval may be respectively counted from the acquired collection of the information data. And if the unit time interval is 1 day and the preset time period is N days, respectively counting the files of the paths written by the application program every day in the N days. The collection of the terminal number can be counted, and the collection comprises the file number counted every day.

And S206, screening out the maximum value of the file quantity from the file quantity in each unit time interval.

In one embodiment, after counting the collection of the file number from the information data, the maximum value of the terminal number may be obtained from the counted terminal number in each unit time interval. If the unit time interval is 1 day and the preset time period is N days, the number of files in the information data associated with the behavior reported by the terminal every day is acquired, and N or less than N files can be acquired every N days to form a collection. The maximum value of the number of the N files can be screened out, and if the maximum value can reach a second preset threshold value, the application program package can be determined to be matched with the path.

Step S207, determining whether the maximum value of the number of files reaches a second preset threshold.

In one embodiment, when the maximum number of files is filtered, it may be determined whether the number of files reaches a second predetermined threshold. The second preset threshold value can be determined according to the number of the user terminals with the buried points and the frequency of writing files into the application program. That is, the higher the frequency of writing files by the application program is, the higher the number of user terminals for setting the buried point is, the larger the base number of statistics is, and the higher the second preset threshold value can be set.

Step S208, if the determination result in step S204 and step S207 is no, counting the occurrence frequency of the application package write path behavior or the behavior of the application program write path corresponding to the application package.

In an embodiment, if it is determined that the maximum value of the number of terminals or the maximum value of the number of files does not reach the corresponding preset threshold, there are also situations that the number of files written by the application program in a certain path is low or the number of terminals corresponding to the application program package in a certain path is small, such as few users are used, and at this time, the application program package is not matched with the path. Further judgment is required. Firstly, counting the occurrence frequency of the writing path behavior of the application program package or the behavior of the writing path of the application program corresponding to the application program package. Specifically, the occurrence frequency of the behavior may be accumulated in a preset time period, that is, the occurrence frequency may be calculated as the occurrence frequency/the preset time period. When the behavior of the application package or the application program writing a certain path frequently appears, even if the counted number of the terminals or the counted number of the files corresponding to the behavior does not reach the preset threshold value, the fact that the application package is possibly matched with the path is indicated.

Step S209, determining whether the occurrence frequency reaches a third preset threshold.

In an embodiment, after obtaining the occurrence frequency of the write behavior of the application package, it may be determined whether the occurrence frequency is not less than a third preset threshold, and if not, it indicates that the application package in the write behavior matches the path. The third preset threshold may be set as a general threshold, or may be set as a specific threshold according to a specific application program.

Step S210, if the determination result in step S204, step S207, or step S209 is yes, it is determined that the application package matches the path.

In one embodiment, when any of the above steps is judged to be yes, it can be determined that the application package matches the path.

Step S211, querying feature information corresponding to the path in a residual feature database.

In one embodiment, after determining the matching relationship between the application package and the path, the feature information corresponding to the path may be further queried in the residual feature database. The residual feature database stores the path and feature information corresponding to the path, and specifically, the feature information may include several corresponding application packages and package file information of the application packages, such as application package names. Namely, the residual feature database stores the matching correspondence between the path and the application package.

Step S212, if the feature information corresponding to the path does not include the application package, identifying the feature information.

In one embodiment, after a certain path is determined to be matched with a certain application program package, if the application program package is not included in the feature information corresponding to the path, which is not queried in the residual feature database, a package missing phenomenon occurs, the feature information can be identified in time, so that the damage to the system caused by the package missing phenomenon of the residual path is avoided.

And step S213, sending early warning information according to the identified characteristic information.

In one embodiment, the server may send the warning information according to the feature information identified in the residual feature database, and may send the warning information to the backend device to inform the backend device of the specific path of the missing packet, the degree of the missing packet, and the like, so that the backend device may perform manual intervention, perform path-corresponding packet adding, or further detect whether the path is matched with the application packet, and the like, so as to timely eliminate the condition of the missing packet, and avoid unnecessary loss to the system.

Fig. 3 is a schematic structural diagram of an embodiment of the apparatus for determining an application package matching path in the present invention. The device according to the embodiment of the present invention can implement the method according to the above-described embodiment. The device can include an obtaining module 301, a first counting module 302, a first judging module 303, a second counting module 304, a second judging module 305, and a determining module 306.

The obtaining module 301 is configured to obtain information data, which is uploaded by multiple terminals and is associated with the writing behavior of the application package.

In one embodiment, the write behavior of the application package may be monitored by placing a buried point at the terminal. One of the situations is that when the terminal monitors a behavior of writing a file in any application package under a path, information data associated with the behavior, such as a package name of the application package, a path name of the path corresponding to the writing, a written file name, a file header and other information data, can be acquired. The information data can be reported to the server periodically through the network or according to the acquisition request of the server, and when the information data is reported to the server, the information data can also comprise information such as terminal identification and the like. The server may obtain, by the obtaining module 301, information data related to a write-in behavior of any application package reported by the multiple terminals, where the write-in behavior of the application package may include a path written by the application package when the application package is installed, and the path is usually a canonical path, such as/android/data written by the application package into the user terminal; the application program package is installed under a user terminal/android/data path, the writing behavior of the application program package can also include a behavior of writing a path of an application program corresponding to the application program package during running, wherein the path can be a path selected by a user, that is, the path is not a standard path generally, for example, files such as pictures or audios and videos downloaded during running of the application program can be written into the path selected by the user, if the user does not select the path, the path written by the application program can be the same as the path written by the application program package, and the path is a default writing path, that is, the path in which the files can be written by the application program package during running of the application program can be written into the application program package, and can also be written into other paths.

A first statistical module 302, configured to count, from the information data, the number of terminals including a path in which the application package is written.

In one embodiment, when the obtaining module 301 obtains the information data associated with the writing behavior of the application package, the first counting module 302 may count the number of terminals including a path written by the application package from the information data. The path written by the application package is an application package installation path, and is usually a standard path in the user terminal, because of the uniqueness of the installation path in the terminal, when the information data of the behavior written by the application package into the path is counted, the number of terminals monitoring the behavior written by the application package into the path can be counted, namely the application package is monitored to be installed under the path in the terminal, so that the matching relationship between the application package and the path can be judged according to the number of the terminals.

A first determining module 303, configured to determine whether the counted number of terminals reaches a first preset threshold.

In an embodiment, when the first counting module 302 counts the number of terminals of the write path of the application package from the information data, the first determining module 303 may determine whether the counted number of terminals reaches a first preset threshold. The first preset threshold value can be determined according to the downloading amount of the application program and the number of the terminals with the current embedded points, that is, the downloading amount or the popularity of the application program is higher, and the higher the number of the terminals with the current embedded points is, the larger the statistical cardinality is, the higher the first preset threshold value can be set.

A second counting module 304, configured to count, from the information data, the number of files in a path written by the application program corresponding to the application program package.

In an embodiment, after the obtaining module 301 obtains the information data associated with the writing behavior of the application package, the second counting module 304 may further count the number of files in the path written by the application program corresponding to the application package from the information data. Specifically, when an application program corresponding to the application package runs, the path file may be written, for example, when the application program needs to write a downloaded file into a certain path of the user terminal, the user terminal may record information data such as an application program name, a file header, a path name, and the like in the behavior when monitoring the behavior, and when a plurality of user terminals record the same behavior, the same behavior means that the application program name and the written path name are the same, and the file characteristics are not required to be the same. The server can count the number of the files written into the path by the application program from the data related to the behavior reported by the user terminal, that is, the server can determine whether the application program is matched with the path by counting the number of the files written into the path by the application program from different user terminals.

A second determining module 305, configured to determine whether the counted number of files reaches a second preset threshold.

In an embodiment, when the second counting module 304 counts the number of files in the application program writing path from the information data reported by the plurality of terminals, the second determining module 305 may determine whether the number of files reaches a second preset threshold. The second preset threshold value can be determined according to the number of the user terminals with the buried points and the frequency of writing files into the application program. That is, the higher the frequency of writing files by the application program is, the higher the number of user terminals for setting the buried point is, the larger the base number of statistics is, and the higher the second preset threshold value can be set.

A determining module 306, configured to determine a matching relationship between the application package and the path according to a determination result of the first determining module 303 or the second determining module 305.

In one embodiment, whether the path written by the application package is counted or the path written by the application program corresponding to the application package is counted, the determining module 306 is required to determine the matching relationship between the application package and the path. One application package can be associated with a plurality of paths, and the matching relationship between the application and the associated paths can be judged one by one according to the mode, namely after the application package is unloaded, the matched path can be used as an unloading residual path. Meanwhile, a path may also match multiple associated application packages, and if an application package under the path is uninstalled, the path may not be defined as an uninstall residual path if the path also matches other application packages. If the matching relationship between the path and an application package is not determined in time, when an application program under the path is unloaded and other application packages under the path with the matching relationship are not found, the path which is not the unloading residual path is defined as the downloading residual, namely, the package missing phenomenon occurs. The embodiment of the invention aims to determine the matching relation between the application program package and all paths associated with the application program package, thereby avoiding the package missing phenomenon.

According to the above manner, the matching relationship between the application package and the path may be determined according to the determination result of whether the number of terminals corresponding to the writing behavior determined by the first determining module 303 reaches the first preset threshold or whether the number of files corresponding to the writing behavior determined by the second determining module 305 reaches the second preset threshold. Specifically, if the number of terminals is not less than a first preset threshold, or the number of files is not less than a second preset threshold, it may be determined that the application package is matched with the path. That is, the more the number of terminals corresponding to the writing behavior is, the greater the matching degree of the application package and the path is, and when the number of terminals reaches the first preset threshold, it may be determined that the application package is matched with the path. Similarly, the more the number of the files corresponding to the writing behavior is, the greater the matching degree of the application program package and the path is, and when the number of the files reaches a second preset threshold, the application program package can be determined to be matched with the path.

Fig. 4 is a schematic structural diagram of another embodiment of the apparatus for determining an application package matching path in the present invention. The device according to the embodiment of the present invention can implement the method according to the above-described embodiment. The device can include an obtaining module 401, a first statistical module 402, a first judging module 403, a second statistical module 404, a second judging module 405, a third statistical module 406, a third judging module 407, a determining module 408, a querying module 409, an identifying module 410, and a sending module 411.

The obtaining module 401 is configured to obtain information data associated with a writing behavior of an application package, which is uploaded by a plurality of terminals within a preset time period, where the preset time period includes N unit time intervals.

In one embodiment, the server may obtain, by the obtaining module 401, information data associated with the writing behavior of the application package uploaded by the plurality of terminals within a preset time period. Such as a preset time period of 1 day, 1 week, etc. The preset time period may include N unit time intervals, where N is an integer and N ≧ 1. And if the preset time period is 1 day and the unit time interval is 1 day, acquiring the information data reported by the terminal on the previous day. If the preset time period is N days and the unit time interval is 1 day, wherein N is greater than 1, the counted information data is a numerical value collection, namely the collection comprises the information data acquired every day.

In this embodiment of the present invention, the first statistical module 402 may include a first statistical unit 4021 and a first screening unit 4022.

The first statistical unit 4021 is configured to count, from the information data, the number of terminals in a path written by the application packet in each unit time interval.

In one embodiment, the first statistical unit 4021 may count the number of terminals of a path in which an application packet is written per unit time interval, respectively, from the collected information data. And if the unit time interval is 1 day and the preset time period is N days, respectively counting the number of terminals of the path written by the application program package every day in the N days. A collection of the terminal number can be counted, wherein the collection includes the terminal number counted each day.

A first screening unit 4022, configured to screen a maximum value of the number of terminals from the number of terminals counted in each unit time interval.

In an embodiment, after the first statistical unit 4021 counts a set of the number of terminals from the information data, the first screening unit 4022 may obtain the maximum value of the number of terminals from the number of terminals counted in each unit time interval. If the unit time interval is 1 day and the preset time period is N days, the number of terminals in the information data related to the behavior reported by the terminal every day is acquired, and N or less terminals can be acquired in N days to form a collection. The maximum value of the number of the N terminals can be screened out, and if the maximum value can reach a first preset threshold value, the application program package can be determined to be matched with the path.

A first determining module 403, configured to determine whether the maximum value of the number of terminals reaches a first preset threshold.

In an embodiment, after the first filtering unit 4022 filters the maximum value of the number of terminals, the first determining module 403 may determine whether the counted maximum value of the number of terminals reaches a first preset threshold. The first preset threshold value can be determined according to the downloading amount of the application program and the number of the terminals with the current embedded points, that is, the downloading amount or the popularity of the application program is higher, and the higher the number of the terminals with the current embedded points is, the larger the statistical cardinality is, the higher the first preset threshold value can be set.

In an embodiment of the present invention, the second statistical module 404 may include a second statistical unit 4041 and a second filtering unit 4042.

The second counting unit 4041 is configured to count, from the information data, the number of files in a path written by the application program corresponding to the application program package in each unit time interval.

In one embodiment, the second counting unit 4041 may count the number of files written by the application program corresponding to the application program package in each unit time interval from the acquired collection of information data. And if the unit time interval is 1 day and the preset time period is N days, respectively counting the files of the paths written by the application program every day in the N days. The collection of the terminal number can be counted, and the collection comprises the file number counted every day.

The second screening unit 4042 is configured to screen a maximum value of the number of files in each unit time interval.

In an embodiment, after the second counting unit 4041 counts the collection of the file number from the information data, the second filtering unit 4042 may obtain the maximum value of the terminal number from the terminal number counted in each unit time interval. If the unit time interval is 1 day and the preset time period is N days, the number of files in the information data associated with the behavior reported by the terminal every day is acquired, and N or less than N files can be acquired every N days to form a collection. The maximum value of the number of the N files can be screened out, and if the maximum value can reach a second preset threshold value, the application program package can be determined to be matched with the path.

A second determining module 405, configured to determine whether the maximum value of the file number reaches a second preset threshold.

In one embodiment, when the second filtering unit 4042 filters out the maximum value of the number of files, the second determining module 405 may determine whether the number of files reaches a second preset threshold. The second preset threshold value can be determined according to the number of the user terminals with the buried points and the frequency of writing files into the application program. That is, the higher the frequency of writing files by the application program is, the higher the number of user terminals for setting the buried point is, the larger the base number of statistics is, and the higher the second preset threshold value can be set.

A third counting module 406, configured to count the occurrence frequency of the application package writing path behavior or the behavior of the application program writing path corresponding to the application package when the determination results of the first determining module 403 and the second determining module 405 are both negative.

In an embodiment, if the first determining module 403 determines that the maximum value of the number of terminals or the second determining module 405 determines that the maximum value of the number of files does not reach the corresponding preset threshold, there are also situations that the number of files written by the application program in a certain path is low or the number of terminals corresponding to the application program package in a certain path is small, such as few users are used, and the like, at this time, it does not represent that the application program package is not matched with the path. Further judgment is required. The third counting module 406 counts the occurrence frequency of the behavior of the application package writing path or the behavior of the application program writing path corresponding to the application package. Specifically, the occurrence frequency of the behavior may be accumulated in a preset time period, that is, the occurrence frequency may be calculated as the occurrence frequency/the preset time period. When the behavior of the application package or the application program writing a certain path frequently appears, even if the counted number of the terminals or the counted number of the files corresponding to the behavior does not reach the preset threshold value, the fact that the application package is possibly matched with the path is indicated.

A third determining module 407, configured to determine whether the occurrence frequency reaches a third preset threshold.

In an embodiment, after the third counting module 406 counts the occurrence frequency of the application package write behavior, the third determining module 407 may determine whether the occurrence frequency is not less than a third preset threshold, and if not, it indicates that the application package in the write behavior matches the path. The third preset threshold may be set as a general threshold, or may be set as a specific threshold according to a specific application program.

A determining module 408, configured to determine that the application package matches the path when the determining module of the first determining module 403, the second determining module 405, or the third determining module 407 is yes.

In one embodiment, the determining module 408 may determine that the application package matches the path when the result of the determination by any of the above-mentioned determining modules is yes.

And the query module 409 is configured to query the residual feature database for feature information corresponding to the path.

In one embodiment, when the determining module 408 determines the matching relationship between the application package and the path, the querying module 409 may further query the residual feature database for feature information corresponding to the path. The residual feature database stores the path and feature information corresponding to the path, and specifically, the feature information may include several corresponding application packages and package file information of the application packages, such as application package names. Namely, the residual feature database stores the matching correspondence between the path and the application package.

The identifying module 410 is configured to identify the feature information if the feature information corresponding to the path of the querying module 409 does not include the application package.

In an embodiment, after determining that a certain path matches with a certain application package, if the query module 409 does not query that the feature information corresponding to the path includes the application package in the residual feature database, that is, a package missing phenomenon occurs, the feature information may be identified in time, so as to avoid damage to the system caused by the package missing phenomenon of the residual path.

A sending module 411, configured to send the warning information according to the feature information identified by the identifying module 410.

In an embodiment, the sending module 411 may send the warning information according to the feature information identified in the residual feature database, and may send the warning information to the background device to notify the specific path of the missing packet, the missing packet degree, and the like, so that the background device may perform manual intervention, perform path-corresponding packet adding, or further detect whether the path is matched with the application packet, and the like, thereby timely eliminating the missing packet condition, and avoiding unnecessary loss to the system.

Fig. 5 is a schematic structural diagram of an embodiment of an apparatus according to the present invention. The apparatus may comprise the above-described device in an embodiment of the invention. The device may include, among other things, a transceiver 501, a communication bus 502, at least one memory 503, and a processor 504. The transceiver 501 may include a wireless transceiver module and a wired transceiver module, and is used for transmitting data with a front-end user terminal and a back-end maintenance terminal. The communication bus 502 is used for implementing connection communication between these components, and the memory 503 may be a high-speed RAM memory or a non-volatile memory (e.g. at least one disk memory). The memory 503 stores a set of program codes, and the processor 504, by calling the program codes, can be used to perform the following operations:

As an alternative embodiment, a specific way for the processor 504 to obtain the information data associated with the writing behavior of the application package uploaded by the multiple terminals is as follows:

As an alternative embodiment, the specific way for the processor 504 to count the number of terminals including the path written by the application package from the information data is as follows:

As an alternative embodiment, the specific way for the processor 504 to count the number of files in the path written by the application program corresponding to the application program package from the information data is as follows:

the specific way for the processor 504 to determine whether the counted number of files reaches the second preset threshold is as follows:

As an alternative embodiment, the specific way for the processor 504 to determine the matching relationship between the application package and the path according to the determination result is as follows:

As an alternative embodiment, the processor 504 calls the program code of the memory 503, and is further configured to perform the following operations:

As an optional embodiment, the specific way for the processor 504 to count the occurrence frequency of the behavior of the application package writing path or the behavior of the application program writing path corresponding to the application package is as follows:

As an alternative embodiment, the processor 504 calls the program code stored in the memory 503 to further perform the following operations:

The above-described embodiments of the apparatus are merely illustrative, and the units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the present embodiment. One of ordinary skill in the art can understand and implement it without inventive effort.

The steps in the method of the embodiment of the invention can be sequentially adjusted, combined and deleted according to actual needs.

The units or sub-units in the terminal or the equipment of the embodiment of the invention can be merged, divided and deleted according to actual needs.

Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware. With this understanding in mind, the above-described technical solutions may be embodied in the form of a software product, which can be stored in a computer-readable storage medium such as ROM/RAM, magnetic disk, optical disk, etc., and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the methods described in the embodiments or some parts of the embodiments.

The above-described embodiments do not limit the scope of the present invention. Any modification, equivalent replacement, and improvement made within the spirit and principle of the above-described embodiments should be included in the protection scope of the technical solution.

Claims

1. A method for determining a matching path of an application package, comprising:

counting the number of terminals including the path written by the application program package from the information data, wherein the writing behavior of the application program package comprises the path written by the application program package and the path written by the application program corresponding to the application program package;

judging whether the maximum value of the counted number of the terminals reaches a first preset threshold value or not; determining the first preset threshold according to the downloading amount of the application program and the number of terminals with current set burying points; at the same time, the user can select the desired position,

judging whether the maximum value of the counted file number reaches a second preset threshold value or not; determining the second preset threshold according to the number of user terminals with buried points and the frequency of writing files into the application program;

determining the matching relation between the application program package and the path according to the judgment result;

if the maximum value of the number of the terminals reaches a first preset threshold value and the maximum value of the number of the files reaches a second preset threshold value, determining that the application program package is matched with the path; the maximum value of the number of the terminals is the maximum value of the number of the terminals screened out from the number of the terminals counted in each unit time interval; the maximum value of the number of the files is the maximum value of the number of the files screened out from the number of the files counted in each unit time interval;

after the application program package is determined to be matched with the path, querying feature information corresponding to the path in a residual feature database; if the characteristic information corresponding to the path does not contain the application program package, identifying the characteristic information; and sending early warning information according to the identified characteristic information.

2. The method of claim 1, wherein the obtaining information data associated with the writing behavior of the application package uploaded by the plurality of terminals comprises:

3. The method of claim 1, wherein the method further comprises:

4. The method of claim 3, wherein the counting the frequency of occurrence of the behavior of the application package writing path or the behavior of the application package corresponding application writing path comprises:

accumulating the occurrence times of the application program package writing path behavior or the behavior of the application program writing path corresponding to the application program package in a preset time period;

5. An apparatus for determining a matching path of an application package, comprising:

the first statistical module is used for counting the number of terminals containing a path written by the application program package from the information data, and the writing behavior of the application program package comprises the path written by the application program package and the path written by the application program corresponding to the application program package;

the first judgment module is used for judging whether the maximum value of the counted number of the terminals reaches a first preset threshold value or not; determining the first preset threshold according to the downloading amount of the application program and the number of terminals with current set burying points; at the same time, the user can select the desired position,

the second judgment module is used for judging whether the maximum value of the counted file number reaches a second preset threshold value or not; determining the second preset threshold according to the number of user terminals with buried points and the frequency of writing files into the application program;

the determining module is used for determining the matching relationship between the application program package and the path according to the judgment result of the first judging module or the second judging module; if the maximum value of the number of the terminals is judged to reach a first preset threshold value and the maximum value of the number of the files reaches a second preset threshold value, determining that the application program package is matched with the path; the maximum value of the number of the terminals is the maximum value of the number of the terminals screened out from the number of the terminals counted in each unit time interval; the maximum value of the number of the files is the maximum value of the number of the files screened out from the number of the files counted in each unit time interval;

the identification module is used for identifying the characteristic information when the characteristic information corresponding to the path is inquired by the inquiry module and does not contain the application program package;

6. The apparatus of claim 5, wherein the obtaining module is further configured to:

7. The apparatus of claim 5, wherein the apparatus further comprises:

wherein the determining module is further configured to:

8. The apparatus of claim 7, wherein the third statistical module comprises:

the accumulation unit is used for accumulating the occurrence times of the application program package writing path behavior or the behavior of the application program writing path corresponding to the application program package in a preset time period;

9. An apparatus comprising a transceiver, a memory, and a processor, wherein:

acquiring information data which is uploaded by a plurality of terminals and is associated with the writing behavior of the application program package; the writing behavior of the application program package comprises a path written by the application program package and a path written by the application program corresponding to the application program package;