CN108400928A - A kind of instant messaging abnormal user processing method and processing device - Google Patents
A kind of instant messaging abnormal user processing method and processing device Download PDFInfo
- Publication number
- CN108400928A CN108400928A CN201810073113.2A CN201810073113A CN108400928A CN 108400928 A CN108400928 A CN 108400928A CN 201810073113 A CN201810073113 A CN 201810073113A CN 108400928 A CN108400928 A CN 108400928A
- Authority
- CN
- China
- Prior art keywords
- user
- detected
- instant message
- instant
- threshold value
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
- H04L51/04—Real-time or near real-time messaging, e.g. instant messaging [IM]
- H04L51/046—Interoperability with other network applications or services
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
- H04L51/21—Monitoring or handling of messages
- H04L51/212—Monitoring or handling of messages using filtering or selective blocking
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
- H04L51/52—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail for supporting social networking services
Abstract
The embodiment of the present invention provides a kind of instant messaging abnormal user processing method and processing device.The method includes：Obtain all instant messages that user to be detected sends within a preset period of time；All instant messages are parsed and counted, the first instant message quantity in preset time period is obtained, receives number of users and all message contents；If according to the first instant message quantity, the reception number of users and all message contents, judge to know that the user to be detected as abnormal user, then carries out closing processing to the user to be detected.Described device is for executing the method.The embodiment of the present invention by obtaining the instant message in preset time period in real time, and judge whether user to be detected is abnormal user according to instant message quantity, reception number of users and message content, if so, carrying out closing processing, to improve the real-time for handling abnormal user.
Description
Technical field
The present embodiments relate to technical field of data processing more particularly to a kind of instant messaging abnormal user processing methods
And device.
Background technology
Current era difference quotient and swindler's (calling abnormal user in the following text) etc. are prevailing, in order to which achievement can resort to every conceivable means, from
Social platform is to vertical service supplier, the figure of these abnormal users everywhere, to these social platforms and vertical service
The user experience of platform causes serious harmful effect.
During realizing the embodiment of the present invention, inventor has found, these present platforms are more using unified posteriority
The form of processing, i.e., according to user feedback abnormal user information, be uniformly processed at regular intervals or manual examination and verification after carry out again
It closes, for example closes the abnormal user on a collection of platform weekly.For example, in one week, some user is reported by other users
Number has been more than preset times, then the user is considered as abnormal user, is closed at this time to the user, that is, forbids it to retransmit
Message.It is that processing is not prompt enough that this processing method is put really, and wide range of users is caused persistently to be disturbed by these abnormal users
It disturbs.
Therefore, how to improve to the real-time that abnormal user is handled is project nowadays urgently to be resolved hurrily.
Invention content
In view of the problems of the existing technology, the embodiment of the present invention provide a kind of instant messaging abnormal user processing method and
Device.
In a first aspect, the embodiment of the present invention provides a kind of instant messaging abnormal user processing method, including：
Obtain all instant messages that user to be detected sends within a preset period of time；
All instant messages are parsed and counted, the first instant message quantity in preset time period is obtained, receives
Number of users and all message contents；
If according to the first instant message quantity, the reception number of users and all message contents, judge to know
The user to be detected is abnormal user, then carries out closing processing to the user to be detected.
Second aspect, the embodiment of the present invention provide a kind of instant messaging abnormal user processing unit, including：
Acquisition module, all instant messages sent within a preset period of time for obtaining user to be detected；
Parsing module, for all instant messages to be parsed and counted, first immediately in acquisition preset time period
Message number receives number of users and all message contents；
First processing module, if for according to the first instant message quantity, the reception number of users and all
Message content judges to know that the user to be detected as abnormal user, then carries out closing processing to the user to be detected.
The third aspect, the embodiment of the present invention provide a kind of electronic equipment, including：Processor, memory and bus, wherein
The processor and the memory complete mutual communication by the bus；
The memory is stored with the program instruction that can be executed by the processor, and the processor calls described program to refer to
Enable the method and step for being able to carry out first aspect.
Fourth aspect, the embodiment of the present invention provide a kind of non-transient computer readable storage medium, including：
The non-transient computer readable storage medium stores computer instruction, and the computer instruction makes the computer
Execute the method and step of first aspect.
A kind of instant messaging abnormal user processing method and processing device provided in an embodiment of the present invention, it is default by obtaining in real time
Instant message in period, and judge that user to be detected is according to instant message quantity, reception number of users and message content
No is abnormal user, if so, carrying out closing processing, to improve the real-time for handling abnormal user.
Description of the drawings
In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, to embodiment or will show below
There is attached drawing needed in technology description to be briefly described, it should be apparent that, the accompanying drawings in the following description is this hair
Some bright embodiments for those of ordinary skill in the art without creative efforts, can be with root
Other attached drawings are obtained according to these attached drawings.
Fig. 1 is a kind of instant messaging abnormal user process flow schematic diagram provided in an embodiment of the present invention；
Fig. 2 is a kind of instant messaging abnormal user process flow schematic diagram that another embodiment of the present invention provides；
Fig. 3 is a kind of instant messaging abnormal user processing device structure diagram provided in an embodiment of the present invention；
Fig. 4 is electronic equipment entity structure schematic diagram provided in an embodiment of the present invention.
Specific implementation mode
In order to make the object, technical scheme and advantages of the embodiment of the invention clearer, below in conjunction with the embodiment of the present invention
In attached drawing, technical scheme in the embodiment of the invention is clearly and completely described, it is clear that described embodiment is
A part of the embodiment of the present invention, instead of all the embodiments.Based on the embodiments of the present invention, those of ordinary skill in the art
The every other embodiment obtained without creative efforts, shall fall within the protection scope of the present invention.
Fig. 1 is a kind of instant messaging abnormal user process flow schematic diagram provided in an embodiment of the present invention, such as Fig. 1 institutes
Show, the method, including：
Step 101：Obtain all instant messages that user to be detected sends within a preset period of time；
Specifically, when user to be detected to other users using instant message applications when sending instant message, processing dress
Real-time monitoring is set, i.e., obtains the instant message that user to be detected sends within a preset period of time in real time, it is to be understood that is default
Period can be set according to actual conditions, and instant message includes sending time, message content and reception user, is gone back
May include other information, the embodiment of the present invention is not specifically limited this.In addition, instant message applications can be wechat, MSN
With QQ etc..
Step 102：All instant messages are parsed and counted, the first instant message number in preset time period is obtained
Amount receives number of users and all message contents；
Specifically, the analysis by the instant message sent to abnormal user learns that abnormal user is compared with normal users,
Its chat lines is mainly to show three features：Frequency is high, object is mostly repeated with content height.Therefore, all to what is got
Instant message parsed, obtain the corresponding message content of each instant message and receive user, then to all instant
Message is counted, and is obtained user to be detected and is had sent how many instant messages altogether within a preset period of time, i.e., first immediately
Message number can also count within a preset period of time altogether to how many personal transmission instant messages, that is, receive number of users,
The message content of all instant messages sent within a preset period of time can also be got.
Step 103：If according to the first instant message quantity, the reception number of users and all message contents,
Judge to know that the user to be detected as abnormal user, then carries out closing processing to the user to be detected.
Specifically, mostly repeated with content height since the chat behavior of abnormal user presents frequency height, object, because
This, can in advance set the multiplicity of the first instant message quantity, reception number of users and message content, if it is to be checked
It is more than to preset to survey the first instant message quantity, reception number of users and message content that user sends within a preset period of time
Threshold value, then it can be seen that user to be detected be abnormal user closed at this time, it may be necessary to carry out closing processing to user to be detected
User can be prohibited send instant message.
The embodiment of the present invention by obtaining the instant message in preset time period in real time, and according to the first instant message number
Amount, reception number of users and message content judge whether user to be detected is abnormal user, if so, carry out closing processing, from
And improve the real-time handled abnormal user.
On the basis of the above embodiments, if it is described according to the first instant message quantity, the reception number of users
With all message contents, judge to know that the user to be detected as abnormal user, then closes the user to be detected
Processing, including：
Content multiplicity is calculated according to all message contents, if in the preset time period, the user to be detected
The the first instant message quantity sent is more than the first predetermined threshold value and the reception number of users is more than the second predetermined threshold value and institute
It states content multiplicity and is more than third predetermined threshold value, then judge to learn the user to be detected as abnormal user, to described to be detected
User carries out closing processing.
Specifically, all message contents that user to be detected sends within a preset period of time are obtained, according to message content
Content multiplicity can be calculated, it should be noted that content multiplicity refers to being considered as and disappearing in all instant messages of transmission
The number for the instant message that content repeats is ceased, the instant message number repeated is more, and content multiplicity is bigger.Therefore, if
In preset time period, the first instant message quantity that user to be detected sends is more than the first predetermined threshold value, and receives number of users
Amount is more than the second predetermined threshold value, and content multiplicity is more than third predetermined threshold value, when meeting above three condition simultaneously, says
The bright user to be detected is abnormal user, at this time, it may be necessary to carry out closing processing to the user to be detected.It should be noted that the
The specific setting of one predetermined threshold value, the second predetermined threshold value and third predetermined threshold value can be adjusted according to actual conditions, this hair
Bright embodiment is not specifically limited this.
The first instant message quantity in the preset time period that the embodiment of the present invention passes through acquisition receives number of users and interior
Unit weight multiplicity judges whether user to be detected is abnormal user, is judged from the chat behavior of abnormal user, so as to
It is enough to be judged in real time, and abnormal user is handled in time.
On the basis of the above embodiments, the method further includes：
If in the preset time period, the first instant message quantity that the user to be detected sends is default more than first
Threshold value and the reception number of users are more than the second predetermined threshold value and the content multiplicity is more than third predetermined threshold value and described
User to be detected then judges to learn the user to be detected as abnormal user, to described to be checked not in effective customer database
User is surveyed to carry out closing processing.
Specifically, if within a preset period of time, it is pre- that the first instant message quantity that user to be detected sends is more than first
If threshold value, and receive number of users and be more than the second predetermined threshold value, and content multiplicity is more than third predetermined threshold value, and also
Need to judge user to be detected whether in effective customer database, this is because needing to place when handling abnormal user to accidentally injure
Effective client, effective client can be stored in advance in effective customer database, will be in user to be detected and effective customer database
Data matched, judge whether the user to be detected is effective client, if it is possible to be searched in effective customer database
To the information of user to be detected, then illustrate that user to be detected is effective client, only when user to be detected is not in effective client's number
According in library and above-mentioned condition is met, then illustrate that user to be detected is abnormal user, and carry out closing processing to the abnormal user.
The embodiment of the present invention passes through the first instant message quantity, reception number of users and interior unit weight within a preset period of time
Multiplicity, and judge whether the user to be detected is effective client, only meet abnormal user feature simultaneously, and be not effective
Just using user to be detected as abnormal user when client, to avoid and be closed to effective client, improve the accurate of judgement
Rate reduces the influence to effective client.
On the basis of the above embodiments, described that content multiplicity is calculated according to all message contents, including：
The the second instant message quantity for counting the instant message with same characteristic features field, according to second instant message
Quantity calculates the content multiplicity；The feature field is that continuous character number is more than in the message of the 4th predetermined threshold value
Hold.
Specifically, obtaining the instant message with same characteristic features field from all instant messages, and count with phase
With the second instant message quantity of the instant message of feature field, it is to be understood that the second instant message quantity should be less than
Or the first instant message quantity equal to all instant messages, content multiplicity, tool are calculated according to the second instant message quantity
Body can be that the second instant message quantity is exactly content multiplicity, can also be the second instant message quantity and the first instant message
The ratio of quantity is content multiplicity.It should be noted that feature field, which refers to continuous character number, is more than the 4th default threshold
The message content of value, that is, assuming that the 4th predetermined threshold value is 5, in two instant messages will this 5 continuous characters be just this
Two instant messages repeat.
The embodiment of the present invention through the embodiment of the present invention by obtaining the first instant message in preset time period in real time, and
Judge whether user to be detected is abnormal user according to instant message quantity, reception number of users and message content, if so, into
Row closes processing, to improve the real-time handled abnormal user.
Fig. 2 is a kind of instant messaging abnormal user process flow schematic diagram that another embodiment of the present invention provides, such as
Shown in Fig. 2, the method, including：
Step 201：Obtain instant message；Obtain that user to be detected sends within a preset period of time all disappears immediately
Breath, parses instant message and is counted, and obtains corresponding first instant message quantity, receives number of users and content repetition
The information such as degree.
Step 202：Whether the first instant message quantity is more than the first predetermined threshold value；Whether judge the first instant message quantity
Step is executed at this time if it is greater than then illustrating that the frequency that the user to be detected sends instant message is too high more than the first predetermined threshold value
Rapid 203, it is no to then follow the steps 207；
Step 203：Receive whether number of users is more than the second predetermined threshold value；Judge to receive whether number of users is more than second
Predetermined threshold value, if it is greater than then illustrate user to be detected send within a preset period of time instant message object it is more, therefore execute
Step 204, no to then follow the steps 207；
Step 204：Whether content multiplicity is more than third predetermined threshold value；Judge whether content multiplicity is default more than third
Threshold value, if it is greater, then illustrating that the instant message that user to be detected sends within a preset period of time is mostly the message repeated, therefore
Step 205 is executed, otherwise this row step 207；
Step 205：Whether it is effective client；Effective customer database is obtained, judges user to be detected whether in effective visitor
In user data library, if illustrating that the user to be detected is effective client if, step 207 is executed, if user to be detected does not exist
In effective customer database, then illustrate not being effective client, executes step 206；
Step 206：It closes；It is learnt according to step 202- steps 205, user to be detected is abnormal user, needs to wait for this
Detection user carries out closing processing.
Step 207：Terminate.
It should be noted that step 202- steps 205 execution sequence can arbitrarily exchange, the embodiment of the present invention to this not
It is specifically limited.
The embodiment of the present invention by obtaining the instant message in preset time period in real time, and according to instant message quantity, connect
It receives number of users and message content judges whether user to be detected is abnormal user, if so, carrying out closing processing, to improve
To the real-time of abnormal user processing.
Fig. 3 is a kind of instant messaging abnormal user processing device structure diagram provided in an embodiment of the present invention, such as Fig. 3 institutes
Show, described device includes：Acquisition module 301, parsing module 302 and first processing module 303, wherein
Acquisition module 301 is for obtaining the first all instant messages that user to be detected sends within a preset period of time；
Parsing module 302 obtains the first instant message number in preset time period for all instant messages to be parsed and counted
Amount receives number of users and all message contents；If first processing module 303 is used for according to the first instant message number
Amount, the reception number of users and all message contents, judge to know the user to be detected as abnormal user, then to described
User to be detected carries out closing processing.
Specifically, when user to be detected to other users using instant message applications when sending instant message, mould is obtained
Block 301 monitors in real time, i.e., obtains the instant message that user to be detected sends within a preset period of time in real time, it is to be understood that
Preset time period can be set according to actual conditions, and instant message includes sending time, and message content and reception are used
Family, can also include other information, and the embodiment of the present invention is not specifically limited this.In addition, instant message applications can be micro-
Letter, MSN and QQ etc..Learn that abnormal user is compared with normal users by the analysis of the instant message sent to abnormal user,
Chat lines are mainly to show three features：Frequency is high, object is mostly repeated with content height.Therefore, parsing module 302 is to obtaining
To all instant messages parsed, obtain the corresponding message content of each instant message and receive user, then to institute
Some instant messages are counted, and are obtained user to be detected and are had sent how many instant messages altogether within a preset period of time, i.e.,
First instant message quantity can also be counted within a preset period of time altogether to how many personal transmission instant messages, that is, be received
Number of users can also get the message content of all instant messages sent within a preset period of time.Due to abnormal use
The chat behavior at family presents frequency height, object is mostly repeated with content height, therefore, can be in advance to the first instant message number
The multiplicity of amount, reception number of users and message content is set, if what user to be detected sent within a preset period of time
First instant message quantity receives number of users and message content more than preset threshold value, then it can be seen that user to be detected
For abnormal user, at this time, it may be necessary to which first processing module 303 carries out user to be detected to close processing, the user closed understands quilt
Forbid sending instant message.
The embodiment of device provided by the invention specifically can be used for executing the process flow of above-mentioned each method embodiment,
Details are not described herein for function, is referred to the detailed description of above method embodiment.
The embodiment of the present invention by obtaining the instant message in preset time period in real time, and according to the first instant message number
Amount, reception number of users and message content judge whether user to be detected is abnormal user, if so, carry out closing processing, from
And improve the real-time handled abnormal user.
On the basis of the above embodiments, the first processing module, is specifically used for：
Content multiplicity is calculated according to all message contents, if in the preset time period, the user to be detected
The the first instant message quantity sent is more than the first predetermined threshold value and the reception number of users is more than the second predetermined threshold value and institute
It states content multiplicity and is more than third predetermined threshold value, then judge to learn the user to be detected as abnormal user, to described to be detected
User carries out closing processing.
Specifically, all message contents that user to be detected sends within a preset period of time are obtained, according to message content
Content multiplicity can be calculated, it should be noted that content multiplicity refers to being considered as and disappearing in all instant messages of transmission
The number for the instant message that content repeats is ceased, the instant message number repeated is more, and content multiplicity is bigger.Therefore, if
In preset time period, the first instant message quantity that user to be detected sends is more than the first predetermined threshold value, and receives number of users
Amount is more than the second predetermined threshold value, and content multiplicity is more than third predetermined threshold value, when meeting above three condition simultaneously, says
The bright user to be detected is abnormal user, at this time, it may be necessary to which first processing module carries out closing processing to the user to be detected.It should
Illustrate, the first predetermined threshold value, the second predetermined threshold value and third predetermined threshold value specific setting can according to actual conditions into
Row adjustment, the embodiment of the present invention are not specifically limited this.
The first instant message quantity in the preset time period that the embodiment of the present invention passes through acquisition receives number of users and interior
Unit weight multiplicity judges whether user to be detected is abnormal user, is judged from the chat behavior of abnormal user, so as to
It is enough to be judged in real time, and abnormal user is handled in time.
On the basis of the above embodiments, described device further includes：
Second processing module, if in the preset time period, the first of user's transmission to be detected disappears immediately
Breath quantity is more than the first predetermined threshold value and the reception number of users is more than the second predetermined threshold value and the content multiplicity is more than
The third predetermined threshold value and user to be detected is not in effective customer database, then judge to learn that the user to be detected is different
Common family, carries out closing processing to the user to be detected.
Specifically, if within a preset period of time, it is pre- that the first instant message quantity that user to be detected sends is more than first
If threshold value, and receive number of users and be more than the second predetermined threshold value, and content multiplicity is more than third predetermined threshold value, and also
Need to judge user to be detected whether in effective customer database, this is because needing to place when handling abnormal user to accidentally injure
Effective client, effective client can be stored in advance in effective customer database, will be in user to be detected and effective customer database
Data matched, judge whether the user to be detected is effective client, if it is possible to be searched in effective customer database
To the information of user to be detected, then illustrate that user to be detected is effective client, only when user to be detected is not in effective client's number
According in library and above-mentioned condition is met, then illustrate that user to be detected is abnormal user, and Second processing module to the abnormal user into
Row closes processing.
The embodiment of the present invention passes through the first instant message quantity, reception number of users and interior unit weight within a preset period of time
Multiplicity, and judge whether the user to be detected is effective client, only meet abnormal user feature simultaneously, and be not effective
Just using user to be detected as abnormal user when client, to avoid and be closed to effective client, improve the accurate of judgement
Rate reduces the influence to effective client.
On the basis of the above embodiments, described that content multiplicity is calculated according to all message contents, including：
The the second instant message quantity for counting the instant message with same characteristic features field, according to second instant message
Quantity calculates the content multiplicity；The feature field is that continuous character number is more than in the message of the 4th predetermined threshold value
Hold.
Specifically, obtaining the instant message with same characteristic features field from all instant messages, and count with phase
With the second instant message quantity of the instant message of feature field, it is to be understood that the second instant message quantity should be less than
Or the first instant message quantity equal to all instant messages, content multiplicity, tool are calculated according to the second instant message quantity
Body can be that the second instant message quantity is exactly content multiplicity, can also be the second instant message quantity and the first instant message
The ratio of quantity is content multiplicity.
The embodiment of the present invention through the embodiment of the present invention by obtaining the first instant message in preset time period in real time, and
Judge whether user to be detected is abnormal user according to instant message quantity, reception number of users and message content, if so, into
Row closes processing, to improve the real-time handled abnormal user.
Fig. 4 is electronic equipment entity structure schematic diagram provided in an embodiment of the present invention, as shown in figure 4, the electronic equipment,
Including：Processor (processor) 401, memory (memory) 402 and bus 403；Wherein,
The processor 401 and memory 402 complete mutual communication by the bus 403；
The processor 401 is used to call the program instruction in the memory 402, to execute above-mentioned each method embodiment
The method provided, such as including：Obtain all instant messages that user to be detected sends within a preset period of time；To all
Instant message parsed and counted, obtain the first instant message quantity in preset time period, receive number of users and all
Message content；If according to the first instant message quantity, the reception number of users and all message contents, judge to obtain
Know that the user to be detected is abnormal user, then the user to be detected is carried out closing processing.
The present embodiment discloses a kind of computer program product, and the computer program product includes being stored in non-transient calculating
Computer program on machine readable storage medium storing program for executing, the computer program include program instruction, when described program instruction is calculated
When machine executes, computer is able to carry out the method that above-mentioned each method embodiment is provided, such as including：User to be detected is obtained to exist
All instant messages sent in preset time period；All instant messages are parsed and counted, preset time is obtained
First instant message quantity, reception number of users and all message contents in section；If according to the first instant message quantity,
The reception number of users and all message contents judge to know that the user to be detected as abnormal user, then waits for described
Detection user carries out closing processing.
The present embodiment provides a kind of non-transient computer readable storage medium, the non-transient computer readable storage medium
Computer instruction is stored, the computer instruction makes the computer execute the method that above-mentioned each method embodiment is provided, example
Such as include：Obtain all instant messages that user to be detected sends within a preset period of time；All instant messages are carried out
It parses and counts, obtain the first instant message quantity in preset time period, receive number of users and all message contents；If root
According to the first instant message quantity, the reception number of users and all message contents, the use to be detected is known in judgement
Family is abnormal user, then carries out closing processing to the user to be detected.
One of ordinary skill in the art will appreciate that：Realize that all or part of step of above method embodiment can pass through
The relevant hardware of program instruction is completed, and program above-mentioned can be stored in a computer read/write memory medium, the program
When being executed, step including the steps of the foregoing method embodiments is executed；And storage medium above-mentioned includes：ROM, RAM, magnetic disc or light
The various media that can store program code such as disk.
The embodiments such as device described above are only schematical, wherein the unit illustrated as separating component
It may or may not be physically separated, the component shown as unit may or may not be physics list
Member, you can be located at a place, or may be distributed over multiple network units.It can be selected according to the actual needs
In some or all of module achieve the purpose of the solution of this embodiment.Those of ordinary skill in the art are not paying creativeness
Labour in the case of, you can to understand and implement.
Through the above description of the embodiments, those skilled in the art can be understood that each embodiment can
It is realized by the mode of software plus required general hardware platform, naturally it is also possible to pass through hardware.Based on this understanding, on
Stating technical solution, substantially the part that contributes to existing technology can be expressed in the form of software products in other words, should
Computer software product can store in a computer-readable storage medium, such as ROM/RAM, magnetic disc, CD, including several fingers
It enables and using so that a computer equipment (can be personal computer, server or the network equipment etc.) executes each implementation
Method described in certain parts of example or embodiment.
Finally it should be noted that：The above embodiments are merely illustrative of the technical solutions of the present invention, rather than its limitations；Although
Present invention has been described in detail with reference to the aforementioned embodiments, it will be understood by those of ordinary skill in the art that：It still may be used
With technical scheme described in the above embodiments is modified or equivalent replacement of some of the technical features；
And these modifications or replacements, various embodiments of the present invention technical solution that it does not separate the essence of the corresponding technical solution spirit and
Range.
Claims (10)
1. a kind of instant messaging abnormal user processing method, which is characterized in that including：
Obtain all instant messages that user to be detected sends within a preset period of time；
All instant messages are parsed and counted, the first instant message quantity in preset time period is obtained, receives and use
Amount amount and all message contents；
If according to the first instant message quantity, the reception number of users and all message contents, judgement is known described
User to be detected is abnormal user, then carries out closing processing to the user to be detected.
If 2. according to the method described in claim 1, it is characterized in that, it is described according to the first instant message quantity, it is described
Number of users and all message contents are received, judges to know the user to be detected as abnormal user, then to described to be detected
User carries out closing processing, including：
Content multiplicity is calculated according to all message contents, if in the preset time period, the user to be detected sends
The first instant message quantity be more than the first predetermined threshold value and the receptions number of users and be more than the second predetermined threshold value and described interior
Unit weight multiplicity is more than third predetermined threshold value, then judges to learn the user to be detected as abnormal user, to the user to be detected
It carries out closing processing.
3. according to the method described in claim 2, it is characterized in that, the method, further includes：
If in the preset time period, the first instant message quantity that the user to be detected sends is more than the first predetermined threshold value
And the reception number of users is more than the second predetermined threshold value and the content multiplicity and is more than third predetermined threshold value and described to be checked
User is surveyed not in effective customer database, then judges to learn the user to be detected as abnormal user, to the use to be detected
Family carries out closing processing.
4. according to the method described in claim 2, it is characterized in that, described calculate content repetition according to all message contents
Degree, including：
The the second instant message quantity for counting the instant message with same characteristic features field, according to the second instant message quantity
Calculate the content multiplicity；The feature field is the message content that continuous character number is more than the 4th predetermined threshold value.
5. a kind of instant messaging abnormal user processing unit, which is characterized in that including：
Acquisition module, the first all instant messages sent within a preset period of time for obtaining user to be detected；
Parsing module, for all instant messages to be parsed and counted, first obtained in preset time period disappears immediately
It ceases quantity, receive number of users and all message contents；
First processing module, if for according to the first instant message quantity, the reception number of users and all message
Content judges to know that the user to be detected as abnormal user, then carries out closing processing to the user to be detected.
6. device according to claim 5, which is characterized in that the processing module is specifically used for：
Content multiplicity is calculated according to all message contents, if in the preset time period, the user to be detected sends
The first instant message quantity be more than the first predetermined threshold value and the receptions number of users and be more than the second predetermined threshold value and described interior
Unit weight multiplicity is more than third predetermined threshold value, then judges to learn the user to be detected as abnormal user, to the user to be detected
It carries out closing processing.
7. device according to claim 6, which is characterized in that described device further includes：
Second processing module, if in the preset time period, the first instant message number of user's transmission to be detected
Amount is more than the first predetermined threshold value and the reception number of users is more than the second predetermined threshold value and the content multiplicity is more than third
The predetermined threshold value and user to be detected is not in effective customer database then judges to learn that the user to be detected uses to be abnormal
Family carries out closing processing to the user to be detected.
8. device according to claim 6, which is characterized in that described to calculate content repetition according to all message contents
Degree, including：
The the second instant message quantity for counting the instant message with same characteristic features field, according to the second instant message quantity
Calculate the content multiplicity；The feature field is the message content that continuous character number is more than the 4th predetermined threshold value.
9. a kind of electronic equipment, which is characterized in that including：Processor, memory and bus, wherein
The processor and the memory complete mutual communication by the bus；
The memory is stored with the program instruction that can be executed by the processor, and the processor calls described program to instruct energy
Enough execute method according to any one of claims 1-4.
10. a kind of non-transient computer readable storage medium, which is characterized in that the non-transient computer readable storage medium is deposited
Computer instruction is stored up, the computer instruction makes the computer execute method according to any one of claims 1-4.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810073113.2A CN108400928A (en) | 2018-01-25 | 2018-01-25 | A kind of instant messaging abnormal user processing method and processing device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810073113.2A CN108400928A (en) | 2018-01-25 | 2018-01-25 | A kind of instant messaging abnormal user processing method and processing device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN108400928A true CN108400928A (en) | 2018-08-14 |
Family
ID=63093822
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810073113.2A Withdrawn CN108400928A (en) | 2018-01-25 | 2018-01-25 | A kind of instant messaging abnormal user processing method and processing device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108400928A (en) |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111262894A (en) * | 2018-11-30 | 2020-06-09 | 北京嘀嘀无限科技发展有限公司 | Method and device for controlling online consultation user quantity |
| CN111277488A (en) * | 2020-01-19 | 2020-06-12 | 上海掌门科技有限公司 | Session processing method and device |
| CN111629399A (en) * | 2019-02-28 | 2020-09-04 | 华为技术有限公司 | Message processing method and device and terminal |
| CN112668889A (en) * | 2020-12-30 | 2021-04-16 | 上海掌门科技有限公司 | Method, device and storage medium for detecting risk user |
| CN112765995A (en) * | 2021-01-20 | 2021-05-07 | 广州明朝互动科技股份有限公司 | Illegal behavior blocking method and system |
Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105323144A (en) * | 2014-07-16 | 2016-02-10 | 腾讯科技（深圳）有限公司 | Method and system for prompting message abnormity in instant messenger |
-
2018
- 2018-01-25 CN CN201810073113.2A patent/CN108400928A/en not_active Withdrawn
Patent Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105323144A (en) * | 2014-07-16 | 2016-02-10 | 腾讯科技（深圳）有限公司 | Method and system for prompting message abnormity in instant messenger |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111262894A (en) * | 2018-11-30 | 2020-06-09 | 北京嘀嘀无限科技发展有限公司 | Method and device for controlling online consultation user quantity |
| CN111629399A (en) * | 2019-02-28 | 2020-09-04 | 华为技术有限公司 | Message processing method and device and terminal |
| CN111629399B (en) * | 2019-02-28 | 2022-01-14 | 华为技术有限公司 | Message processing method and device and terminal |
| CN111277488A (en) * | 2020-01-19 | 2020-06-12 | 上海掌门科技有限公司 | Session processing method and device |
| CN112668889A (en) * | 2020-12-30 | 2021-04-16 | 上海掌门科技有限公司 | Method, device and storage medium for detecting risk user |
| CN112765995A (en) * | 2021-01-20 | 2021-05-07 | 广州明朝互动科技股份有限公司 | Illegal behavior blocking method and system |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108400928A (en) | A kind of instant messaging abnormal user processing method and processing device | |
| CN103532797B (en) | A kind of User logs in method for monitoring abnormality and device | |
| US10496815B1 (en) | System, method, and computer program for classifying monitored assets based on user labels and for detecting potential misuse of monitored assets based on the classifications | |
| CN110191094A (en) | Monitoring method and device, storage medium, the terminal of abnormal data | |
| CN106371984B (en) | A kind of data monitoring method, equipment and system | |
| CN107832200A (en) | Alert processing method, device, computer equipment and storage medium | |
| CN107528749A (en) | Website Usability detection method, apparatus and system based on cloud protection daily record | |
| WO2019076017A1 (en) | Feedback information processing method and apparatus, terminal device and medium | |
| US9544256B2 (en) | Crowdsourcing e-mail filtering | |
| CN106371973A (en) | Data processing method, equipment and system | |
| CN108923972B (en) | Weight-reducing flow prompting method, device, server and storage medium | |
| CN111143102A (en) | Abnormal data detection method and device, storage medium and electronic equipment | |
| US11455640B2 (en) | Transaction indicator monitoring methods, apparatuses, and devices | |
| CN107592236A (en) | The monitoring method and device of a kind of related business datum of promotion message | |
| CN107426231B (en) | Method and device for identifying user behavior | |
| WO2019174184A1 (en) | Outbound phone call analysis and control method, electronic apparatus and readable storage medium | |
| CN109214908A (en) | A kind of monitoring method and relevant apparatus | |
| CN106936688B (en) | Notification sending method and device | |
| CN113992340A (en) | User abnormal behavior recognition method, device, equipment, storage medium and program | |
| CN110532485B (en) | User behavior detection method and device based on multi-source data fusion | |
| CN106941440B (en) | Session anti-harassment method and device | |
| CN106888148B (en) | Method and apparatus for handling mail system user passwords that are too simple | |
| CN107294843A (en) | A kind of instant communication information processing method and processing device | |
| CN109165145A (en) | A kind of the service condition statistical method and device of application program | |
| CN114491015A (en) | Method and system for incremental training and continuous deployment of text classification model |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WW01 | Invention patent application withdrawn after publication | ||
| WW01 | Invention patent application withdrawn after publication |
Application publication date: 20180814 |