CN110209551A - A kind of recognition methods of warping apparatus, device, electronic equipment and storage medium - Google Patents

A kind of recognition methods of warping apparatus, device, electronic equipment and storage medium Download PDF

Info

Publication number
CN110209551A
CN110209551A CN201910442079.6A CN201910442079A CN110209551A CN 110209551 A CN110209551 A CN 110209551A CN 201910442079 A CN201910442079 A CN 201910442079A CN 110209551 A CN110209551 A CN 110209551A
Authority
CN
China
Prior art keywords
equipment
warping apparatus
identified
frequency
occurrence
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201910442079.6A
Other languages
Chinese (zh)
Other versions
CN110209551B (en
Inventor
陈亚东
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing QIYI Century Science and Technology Co Ltd
Original Assignee
Beijing QIYI Century Science and Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing QIYI Century Science and Technology Co Ltd filed Critical Beijing QIYI Century Science and Technology Co Ltd
Priority to CN201910442079.6A priority Critical patent/CN110209551B/en
Publication of CN110209551A publication Critical patent/CN110209551A/en
Application granted granted Critical
Publication of CN110209551B publication Critical patent/CN110209551B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/30Monitoring
    • G06F11/3065Monitoring arrangements determined by the means or processing involved in reporting the monitored data
    • G06F11/3072Monitoring arrangements determined by the means or processing involved in reporting the monitored data where the reporting involves data filtering, e.g. pattern matching, time or event triggered, adaptive or policy-based reporting
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/30Monitoring
    • G06F11/3065Monitoring arrangements determined by the means or processing involved in reporting the monitored data
    • G06F11/3072Monitoring arrangements determined by the means or processing involved in reporting the monitored data where the reporting involves data filtering, e.g. pattern matching, time or event triggered, adaptive or policy-based reporting
    • G06F11/3082Monitoring arrangements determined by the means or processing involved in reporting the monitored data where the reporting involves data filtering, e.g. pattern matching, time or event triggered, adaptive or policy-based reporting the data filtering being achieved by aggregating or compressing the monitored data
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F18/00Pattern recognition
    • G06F18/20Analysing
    • G06F18/23Clustering techniques

Abstract

The embodiment of the invention provides a kind of recognition methods of warping apparatus, device, electronic equipment and storage mediums, which comprises obtains the facility information of each equipment to be identified;The facility information of each equipment to be identified is ranked up according to frequency of occurrence, obtains ranking results;The ranking results of facility information based on each equipment to be identified, determine frequent item set and its frequency of occurrence, wherein frequent item set is the set of multiple and different facility informations;According to frequent item set and its frequency of occurrence, the warping apparatus in equipment to be identified is determined.Due to not needing manually to carry out data analysis and Rulemaking, it can timely and effectively identify warping apparatus, improve the recognition efficiency and accuracy rate of warping apparatus.

Description

A kind of recognition methods of warping apparatus, device, electronic equipment and storage medium
Technical field
The present invention relates to warping apparatus processing technology field, more particularly to a kind of recognition methods of warping apparatus, device, Electronic equipment and storage medium.
Background technique
For network platforms such as video websites, there may be the equipment of some falsenesses, be properly termed as warping apparatus, these Equipment clicks maliciously video playing or advertising business by fake equipment information, manufactures false click volume.This can be damaged The equity of the evil network platform and advertiser.
In order to identify these warping apparatus to carry out interception filtering, reduces and lost caused by warping apparatus pair, needed to different Set up standby identified.Traditional warping apparatus recognition methods depends on the professional experiences of developer, passes through exploit person Member observes the information of doubtful warping apparatus, and combines the information of normal device, manually makes the detected rule of warping apparatus, into And warping apparatus is identified using the detected rule.
Professional experiences of the above method due to depending on personnel, when carrying out warping apparatus identification, efficiency is lower, and by The time is needed to carry out data analysis in personnel, therefore there are hysteresis qualitys for the above method, the accuracy rate for causing warping apparatus to identify is not It is high.
Summary of the invention
The recognition methods for being designed to provide a kind of warping apparatus, device, electronic equipment and the storage of the embodiment of the present invention Medium, to improve the recognition efficiency and accuracy rate of warping apparatus.Specific technical solution is as follows:
In a first aspect, the embodiment of the invention provides a kind of recognition methods of warping apparatus, which comprises
Obtain the facility information of each equipment to be identified;
The facility information of each equipment to be identified is ranked up according to frequency of occurrence, obtains ranking results;
The ranking results of facility information based on each equipment to be identified, determine frequent item set and its frequency of occurrence, wherein The frequent item set is the set of multiple and different facility informations;
According to the frequent item set and its frequency of occurrence, the warping apparatus in the equipment to be identified is determined.
Optionally, exception in the equipment to be identified is determined according to the frequent item set and its frequency of occurrence described Before the step of equipment, the method also includes:
Obtain the location information of each equipment to be identified;
According to the location information and pre-determined distance threshold value and/or pre-set velocity threshold value, each equipment to be identified is determined In abnormal jump equipment;
According to the location information and preset quantity, abnormal aggregation equipment in each equipment to be identified is determined wherein, The preset quantity is the quantity for the normal device being distributed within the scope of predeterminable area;
Based on the abnormal jump equipment and the abnormal aggregation equipment, first kind warping apparatus is determined;
It is described according to the frequent item set and its frequency of occurrence, determine the step of the warping apparatus in the equipment to be identified Suddenly, comprising:
According to the frequent item set and its frequency of occurrence, the second class warping apparatus in the equipment to be identified is determined;
According to the first kind warping apparatus and the second class warping apparatus, the exception in the equipment to be identified is determined Equipment.
Optionally, described based on the abnormal jump equipment and the abnormal aggregation equipment, determine first kind warping apparatus The step of, comprising:
For each target device Allotment Serial Number and mark, wherein the target device include the abnormal jump equipment and The abnormal aggregation equipment;
Target device using distance less than the first preset value is as a connected component;
Mark by the mark of the smallest target device of serial number in the connected component as the connected component, until all companies The mark of entire body does not change;
Determine the quantity of target device corresponding to each mark;
The quantity is reached into target device corresponding to the mark of the second preset value and is determined as first kind warping apparatus.
Optionally, described according to the first kind warping apparatus and the second class warping apparatus, it determines described to be identified The step of warping apparatus in equipment, comprising:
The first kind warping apparatus is determined as with identical warping apparatus in the second class warping apparatus high-risk different It sets up standby;
It is different that the first kind warping apparatus warping apparatus different from the second class warping apparatus is determined as middle danger It sets up standby.
Optionally, the ranking results of the facility information based on each equipment to be identified determine frequent item set and its go out The step of occurrence number, comprising:
According to the frequency of occurrence sequence from high to low of the facility information of each equipment to be identified, constructed downwards from root node Child node obtains frequent pattern tree (fp tree);
The frequent pattern tree (fp tree) is scanned, determines frequent item set and its frequency of occurrence in the frequent pattern tree (fp tree), wherein institute State frequent item set and be include multiple and different facility informations node set.
Optionally, described according to the frequent item set and its frequency of occurrence, determine that the exception in the equipment to be identified is set Standby step, comprising:
The frequent item set that quantity including facility information reaches third preset value is determined as alternative frequent item set;
The alternative frequency frequent item set that frequency of occurrence reaches preset times is determined as abnormally frequent item collection;
It will include that the equipment to be identified of the corresponding facility information of the abnormally frequent item collection is determined as exception in facility information Equipment.
Optionally, it is ranked up, is arranged according to frequency of occurrence in the facility information by each equipment to be identified Before the step of sequence result, the method also includes:
Facility information by frequency of occurrence lower than the 4th preset value removes;
The facility information by each equipment to be identified is ranked up according to frequency of occurrence, obtains the step of ranking results Suddenly, comprising:
The facility information of each equipment to be identified after removal is ranked up according to frequency of occurrence, obtains sequence knot Fruit.
Second aspect, the embodiment of the invention provides a kind of identification device of warping apparatus, described device includes:
Apparatus information acquiring module, for obtaining the facility information of each equipment to be identified;
Frequency of occurrence sorting module, for arranging the facility information of each equipment to be identified according to frequency of occurrence Sequence obtains ranking results;
Frequent item set determining module determines frequent for the ranking results of the facility information based on each equipment to be identified Item collection and its frequency of occurrence, wherein the frequent item set is the set of multiple and different facility informations;
Warping apparatus determining module, for determining the equipment to be identified according to the frequent item set and its frequency of occurrence In warping apparatus.
Optionally, described device further include:
Location information obtains module, for, according to the frequent item set and its frequency of occurrence, determining described wait know described Before warping apparatus in other equipment, the location information of each equipment to be identified is obtained;
Abnormal jump equipment determining module, for according to the location information and pre-determined distance threshold value and/or pre-set velocity Threshold value determines the abnormal jump equipment in each equipment to be identified;
Abnormal aggregation equipment determining module, for determining described each to be identified according to the location information and preset quantity Abnormal aggregation equipment in equipment, wherein the preset quantity is the quantity for the normal device being distributed within the scope of predeterminable area;
First kind warping apparatus determining module, for jumping equipment and the abnormal aggregation equipment based on the exception, really Determine first kind warping apparatus;
The warping apparatus determining module includes:
Second class warping apparatus determination unit, for determining described wait know according to the frequent item set and its frequency of occurrence The second class warping apparatus in other equipment;
First warping apparatus determination unit is used for according to the first kind warping apparatus and the second class warping apparatus, Determine the warping apparatus in the equipment to be identified.
Optionally, the first kind warping apparatus determining module includes:
Serial number identifies allocation unit, for being each target device Allotment Serial Number and mark, wherein the target device packet Include the abnormal jump equipment and the abnormal aggregation equipment;
Connected component determination unit, for the target device using distance less than the first preset value as a connected component;
Determination unit is identified, for using the mark of the smallest target device of serial number in the connected component as the connected component Mark, until the mark of all connected components does not change;
Target device quantity determination unit, for determining the quantity of target device corresponding to each mark;
First kind warping apparatus determination unit, for the quantity to be reached to target corresponding to the mark of the second preset value Equipment is determined as first kind warping apparatus.
Optionally, the first warping apparatus determination unit includes:
High-risk warping apparatus determines subelement, for will be in the first kind warping apparatus and the second class warping apparatus Identical warping apparatus is determined as high-risk warping apparatus;
Middle danger warping apparatus determines subelement, for will be in the first kind warping apparatus and the second class warping apparatus Different warping apparatus is determined as middle danger warping apparatus.
Optionally, the frequent item set determining module includes:
Frequent pattern tree (fp tree) construction unit, the frequency of occurrence for the facility information according to each equipment to be identified is from high to low Sequence, construct child node downwards from root node, obtain frequent pattern tree (fp tree);
Frequent item set determination unit determines the frequent episode in the frequent pattern tree (fp tree) for scanning the frequent pattern tree (fp tree) Collection and its frequency of occurrence, wherein the frequent item set be include multiple and different facility informations node set.
Optionally, the warping apparatus determining module includes:
Alternative frequent item set determination unit, for will include that the quantity of facility information reaches the frequent item set of third preset value It is determined as alternative frequent item set;
Abnormally frequent item collection determination unit, the alternative frequency frequent item set for frequency of occurrence to be reached preset times are determined as Abnormally frequent item collection;
Second warping apparatus determination unit, for will include that the corresponding equipment of the abnormally frequent item collection is believed in facility information The equipment to be identified of breath is determined as warping apparatus.
Optionally, described device further include:
Facility information remove module, for the facility information by each equipment to be identified according to frequency of occurrence into Row sequence, before obtaining ranking results, the facility information by frequency of occurrence lower than the 4th preset value is removed;
The frequency of occurrence sorting module includes:
Frequency of occurrence sequencing unit, the facility information for each equipment to be identified after removing is according to frequency of occurrence It is ranked up, obtains ranking results.
The third aspect, the embodiment of the invention provides a kind of electronic equipment, including processor, communication interface, memory and Communication bus, wherein processor, communication interface, memory complete mutual communication by communication bus;
Memory, for storing computer program;
Processor when for executing the program stored on memory, realizes the knowledge of any of the above-described warping apparatus Other method and step.
Fourth aspect, the embodiment of the invention provides a kind of computer readable storage medium, the computer-readable storage Dielectric memory contains computer program, and the computer program realizes any of the above-described warping apparatus when being executed by processor Recognition methods step.
In scheme provided by the embodiment of the present invention, the facility information of the available each equipment to be identified of electronic equipment;It will The facility information of each equipment to be identified is ranked up according to frequency of occurrence, obtains ranking results;Based on each equipment to be identified The ranking results of facility information determine frequent item set and its frequency of occurrence, wherein frequent item set is multiple and different facility information Set;According to frequent item set and its frequency of occurrence, the warping apparatus in equipment to be identified is determined.Due to not needing manually to carry out Data analysis and Rulemaking, therefore can timely and effectively identify warping apparatus, improve the recognition efficiency and standard of warping apparatus True rate.
Detailed description of the invention
In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, to embodiment or will show below There is attached drawing needed in technical description to be briefly described, it should be apparent that, the accompanying drawings in the following description is only this Some embodiments of invention for those of ordinary skill in the art without creative efforts, can be with It obtains other drawings based on these drawings.
Fig. 1 is a kind of flow chart of the recognition methods of warping apparatus provided by the embodiment of the present invention;
Fig. 2 is a kind of flow chart of method of determination of the first kind warping apparatus based on embodiment illustrated in fig. 1;
Fig. 3 is a kind of specific flow chart of step S204 in embodiment illustrated in fig. 2;
Fig. 4 is a kind of schematic diagram of the connected graph based on embodiment illustrated in fig. 3;
Fig. 5 is a kind of schematic diagram of the frequent pattern tree (fp tree) based on embodiment illustrated in fig. 1;
Fig. 6 is a kind of specific flow chart of step S104 in embodiment illustrated in fig. 1;
Fig. 7 is a kind of structural schematic diagram of the identification device of warping apparatus provided by the embodiment of the present invention;
Fig. 8 is the structural schematic diagram of a kind of electronic equipment provided by the embodiment of the present invention.
Specific embodiment
Following will be combined with the drawings in the embodiments of the present invention, and technical solution in the embodiment of the present invention carries out clear, complete Site preparation description, it is clear that described embodiments are only a part of the embodiments of the present invention, instead of all the embodiments.It is based on Embodiment in the present invention, it is obtained by those of ordinary skill in the art without making creative efforts every other Embodiment shall fall within the protection scope of the present invention.
In order to improve the recognition efficiency and accuracy rate of warping apparatus, the embodiment of the invention provides a kind of knowledges of warping apparatus Other method, apparatus, electronic equipment and computer readable storage medium.
The recognition methods for being provided for the embodiments of the invention a kind of warping apparatus first below is introduced.
It is abnormal that a kind of recognition methods of warping apparatus provided by the embodiment of the present invention can be applied to any needs identification The electronic equipment of equipment is not specifically limited, for example, can be computer, tablet computer, processor etc. for the side of description herein Just, hereinafter referred to as electronic equipment.
As shown in Figure 1, a kind of recognition methods of warping apparatus, which comprises
S101 obtains the facility information of each equipment to be identified;
The facility information of each equipment to be identified is ranked up according to frequency of occurrence, obtains ranking results by S102;
S103, the ranking results of the facility information based on each equipment to be identified, determines frequent item set and its frequency of occurrence;
Wherein, the frequent item set is the set of multiple and different facility informations.
S104 determines the warping apparatus in the equipment to be identified according to the frequent item set and its frequency of occurrence.
As it can be seen that the equipment of the available each equipment to be identified of electronic equipment is believed in scheme provided by the embodiment of the present invention Breath;The facility information of each equipment to be identified is ranked up according to frequency of occurrence, obtains ranking results;It to be identified is set based on each The ranking results of standby facility information determine frequent item set and its frequency of occurrence, wherein frequent item set is multiple and different equipment The set of information;According to frequent item set and its frequency of occurrence, the warping apparatus in equipment to be identified is determined.It is artificial due to not needing Data analysis and Rulemaking are carried out, therefore can timely and effectively identify warping apparatus, improves the recognition efficiency of warping apparatus And accuracy rate.
In above-mentioned steps S101, the facility information of the available each equipment to be identified of electronic equipment, wherein to be identified to set Standby as may be warping apparatus, the equipment identified.General equipment to be identified is multiple.The equipment of equipment to be identified Information may include the letter such as CPU (Central Processing Unit, processor) model, CPU core voltage, sensor model number Breath, is not specifically limited herein.In one embodiment, electronic equipment can sign and issue log from the fingerprint of each equipment to be identified The middle facility information for obtaining each equipment to be identified.
In order to which the frequency for determining that each facility information occurs can after electronic equipment obtains the facility information of each equipment to be identified The facility information of each equipment to be identified to be ranked up according to frequency of occurrence, to obtain ranking results.Since warping apparatus is Facility information is the facility information forged, so a possibility that facility information of warping apparatus is identical is very high, by believing equipment Breath is ranked up the frequency of occurrences that can know facility information according to frequency of occurrence.
For example, the facility information of equipment A to be identified includes information a, information b, information c;The facility information of equipment B to be identified Including information a, information b, information c, information d;The facility information of equipment C to be identified includes information a, information c, information d, information e. The facility information of so each equipment to be identified is information according to the ranking results that frequency of occurrence is ranked up from high to low A, information c, information b, information d, information e.Wherein, the frequency of occurrence of information a and information c are 3 times, and the two sequence can be adjusted It changes;The frequency of occurrence of information b and information d are 2 times, and the two sequence can exchange.
After obtaining above-mentioned ranking results, electronic equipment can execute above-mentioned steps S103, that is, be based on each equipment to be identified Facility information ranking results, determine frequent item set and its frequency of occurrence.Wherein, frequent item set is that multiple and different equipment is believed The set of breath.That is, the set that frequent item set is made of the facility information of multiple dimensions.For example, in above-mentioned example, letter Ceasing a, information b, information c is a frequent item set.
The frequency of occurrence of frequent item set is the combined frequency of occurrence for the facility information that the frequent item set includes, for example, The facility information of equipment 1 to be identified includes information x, information y, information z;The facility information of equipment 2 to be identified includes information x, letter Cease y, information z, information s, then, frequent item set information x, information y, information z frequency of occurrence be 2.
In above-mentioned steps S104, electronic equipment can according to determining frequent item set and its frequency of occurrence, determine to Identify the warping apparatus in equipment.Since identical facility information is more, equipment to be identified is more likely to be warping apparatus, institute With in one embodiment, it is corresponding that the most frequent item set of frequency of occurrence can be determined as warping apparatus by electronic equipment Frequent item set, then the equipment to be identified that facility information includes facility information included by the frequent item set is warping apparatus.
In another embodiment, due to that may there are the most of equipment of some facility informations all to have, then for It avoids for normal device being mistakenly identified as warping apparatus, electronic equipment can determine the facility information that all frequent item sets include Whether quantity reaches certain amount, for example, 3 or 4 etc., if reaching the quantity, such frequent episode is determined as doubtful The corresponding frequent item set of warping apparatus.In turn, then by the most frequent item set of wherein frequency of occurrence it is corresponding to be determined as warping apparatus Frequent item set, then the equipment to be identified that facility information includes facility information included by the frequent item set is abnormal set It is standby.
In order to more accurately determine warping apparatus, as a kind of embodiment of the embodiment of the present invention, above-mentioned according to institute Before the step of stating frequent item set and its frequency of occurrence, determining the warping apparatus in the equipment to be identified, as shown in Fig. 2, on The method of stating can also include:
S201 obtains the location information of each equipment to be identified;
The location information of the available each equipment to be identified of electronic equipment, wherein location information is that equipment to be identified exists The location information at each time point.In one embodiment, electronic equipment can obtain each to be identified from user's viewing log The location information of equipment.
S202 is determined described each to be identified according to the location information and pre-determined distance threshold value and/or pre-set velocity threshold value Abnormal jump equipment in equipment;
A possibility that due to movement speed is too fast or moving distance is excessive equipment to be identified being warping apparatus higher, institute It, can be according to location information and pre-determined distance threshold value and/or pre- after the location information for obtaining each equipment to be identified with electronic equipment If threshold speed, the abnormal jump equipment in each equipment to be identified is determined.
As an implementation, electronic equipment can determine each equipment to be identified in set period of time according to location information The distance of interior movement, for example, in 1 hour the distance of interior movement, the distance moved within half an hour, move in 45 minutes Distance etc..In turn, whether the distance for determining that each equipment to be identified moves in the set time period is greater than pre-determined distance threshold value.Its In, which can be set according to the average movement speed of normal device and duration of set period of time etc., For example, can be 300 kms, 200 kms, 180 kms etc..
If the distance that equipment to be identified moves in the set time period is greater than pre-determined distance threshold value, illustrate that this to be identified sets Standby movement speed is too fast, does not meet reality, then it is just probably warping apparatus, electronic equipment can determine it as the A kind of abnormal jump equipment.If the distance that equipment to be identified moves in the set time period is not more than pre-determined distance threshold value, say The bright equipment movement speed to be identified is more normal, meets reality, then it is smaller for the possibility of warping apparatus.
As another embodiment, electronic equipment can determine the mobile speed of each equipment to be identified according to location information Degree, in turn, determines whether the movement speed of each equipment to be identified is greater than pre-set velocity threshold value.Wherein, which can To be set according to the average movement speed etc. of normal device, for example, can for 120 metre per second (m/s)s, 100 metre per second (m/s)s, 80 meters it is every Second etc..
If equipment movement speed to be identified is greater than pre-set velocity threshold value, illustrate that the equipment movement speed to be identified is too fast, Reality is not met, then it is just probably warping apparatus, electronic equipment can determine it as the jump extremely of the second class and set It is standby.If the movement speed of equipment to be identified is not more than pre-set velocity threshold value, illustrate that the equipment movement speed to be identified is relatively positive Often, meet reality, then it is smaller for the possibility of warping apparatus.
After the above-mentioned first kind jump equipment and the second class extremely jump equipment extremely has been determined, electronic equipment can be by first Class jump equipment extremely is determined as abnormal jump equipment, the second class jump equipment extremely can also be determined as abnormal jump and set It is standby, the first kind jump equipment and the second class extremely jump equipment extremely can also be determined as exception and jump equipment, this is all to close Reason, it is not specifically limited herein.
S203 determines the abnormal aggregation equipment in each equipment to be identified according to the location information and preset quantity;
Due to the excessively high equipment to be identified of concentration class be warping apparatus a possibility that it is higher, so electronic equipment obtain respectively to After the location information for identifying equipment, it can determine that the abnormal aggregation in each equipment to be identified is set according to location information and preset quantity It is standby.
Electronic equipment can determine the position of each equipment to be identified according to location information, and then determine in setting regions range The quantity of interior equipment to be identified, for example, the quantity of the equipment to be identified within the scope of 1 square metre, within the scope of 2 square metres The quantity of equipment to be identified, quantity of equipment to be identified within the scope of 10 square metres etc..In turn, it determines in certain area coverage The quantity of equipment to be identified whether be greater than preset quantity.Wherein, which can be distribution within the scope of predeterminable area The quantity of normal device, specific value can be carried out according to the aggregation extent of normal device and size of predeterminable area range etc. Setting, for example, can be 30,20,50 etc..
If quantity of the equipment to be identified within the scope of setting regions is greater than preset quantity, illustrate the aggregation of equipment to be identified Height is spent, reality is not met, then these equipment to be identified are just probably warping apparatus, electronic equipment can be waited for these Identification equipment is determined as abnormal aggregation equipment.If quantity of the equipment to be identified within the scope of setting regions is not more than present count Amount, illustrates that the concentration class of equipment to be identified is not high, meets reality, then it is smaller for the possibility of warping apparatus.
It should be noted that the execution sequence of above-mentioned steps S202 and step S203 is not restricted, step can be first carried out Rapid S202, can also first carry out step S203, also may be performed simultaneously step S202 and step S203, this is all reasonable.
S204 determines first kind warping apparatus based on the abnormal jump equipment and the abnormal aggregation equipment.
In order to which determination is most likely to be the to be identified of warping apparatus from above-mentioned abnormal jump equipment and abnormal aggregation equipment Equipment, electronic equipment can determine first kind warping apparatus based on abnormal jump equipment and abnormal aggregation equipment.
In one embodiment, electronic equipment can also be set identical in abnormal jump equipment and abnormal aggregation equipment It is standby to be determined as first kind warping apparatus, or abnormal jump equipment and abnormal aggregation equipment are determined as the first kind and set extremely It is standby.
Correspondingly, it is above-mentioned according to the frequent item set and its frequency of occurrence, determine that the exception in the equipment to be identified is set Standby step may include:
According to the frequent item set and its frequency of occurrence, the second class warping apparatus in the equipment to be identified is determined;Root According to the first kind warping apparatus and the second class warping apparatus, the warping apparatus in the equipment to be identified is determined.
Electronic equipment can may be set according to above-mentioned frequent item set and its frequency of occurrence, determination for the to be identified of warping apparatus It is standby, as the second class warping apparatus.In turn, according to first kind warping apparatus and the second class warping apparatus, equipment to be identified is determined In warping apparatus.
Identical equipment in first kind warping apparatus and the second class warping apparatus can be determined as abnormal set by electronic equipment It is standby, first kind warping apparatus and the second class warping apparatus can also be determined as warping apparatus.Certainly other can also be used Mode determines warping apparatus, is not specifically limited herein.
As it can be seen that in the present embodiment, the location information of the available each equipment to be identified of electronic equipment is based on location information It determines first kind warping apparatus, in turn, warping apparatus, Ke Yicong is determined based on first kind warping apparatus and the second class warping apparatus Various aspects identify warping apparatus, so that the recognition accuracy of warping apparatus is higher.
As a kind of embodiment of the embodiment of the present invention, as shown in figure 3, above-mentioned based on the abnormal jump equipment and institute The step of stating abnormal aggregation equipment, determining first kind warping apparatus may include:
S301 is each target device Allotment Serial Number and mark;
In order to accurately determine that first kind warping apparatus, electronics are set from above-mentioned abnormal jump equipment and abnormal aggregation equipment It is standby first kind warping apparatus to be determined using connected graph algorithm.Electronic equipment can be each target device Allotment Serial Number first And mark.Wherein, target device includes above-mentioned abnormal jump equipment and abnormal aggregation equipment, and serial number and target device one are a pair of It answers, mark is corresponded with target device.Serial number is 1,2,3 ..., and N, N are positive integer.The form of mark can use arbitrary shape The mark of formula, for example, can be text, letter, character etc., do specific limit as long as target device can be indicated herein It is fixed.
S302, the target device using distance less than the first preset value is as a connected component;
It can determine the position of each equipment to be identified according to above-mentioned location information electronic equipment, and then can will be apart from being less than The target device of first preset value is as a connected component.Wherein, the first preset value can be according to the distance between normal device Etc. factors setting, for example, can be 1 meter, 1.5 meters, 2 meters etc., be not specifically limited herein.
As shown in figure 4, target device includes 6, serial number is respectively 1-6, and mark is respectively t1-t6.If serial number 1 Target device at a distance from the target device of serial number 3 less than the first preset value, then just by the target device and sequence of serial number 1 Number for 3 target device as a connected component.The two can be connected with side in figure.
S303, the mark by the mark of the smallest target device of serial number in the connected component as the connected component, until The mark of all connected components does not change;
Next, electronic equipment can be by the mark of the smallest target device of serial number in connected component identified as the connected component Know.For example, for the connected component that the target device of the target device of serial number 1 and serial number 3 forms, the mark of the connected component Know the mark of the as target device of serial number 1.
Electronic equipment can be determined in this mode by the mark of all connected components, until the mark of all connected components is not sent out Changing, can obtain one include the connected component being connected with side connected graph, which illustrates abnormal jump equipment And the distance relation of abnormal aggregation equipment.
For example, as shown in figure 4, the connected component that the target device of target device and serial number 5 for serial number 2 forms comes It says, the mark of the connected component is the mark of the target device of serial number 2;For the target device and serial number 6 of serial number 4 For the connected component of target device composition, the mark of the connected component is the mark of the target device of serial number 4, if serial number 2 target device at a distance from the target device of serial number 4 less than the first preset value, then 4 target devices are one Connected component, the mark of the connected component are the mark of the target device of serial number 2.
S304 determines the quantity of target device corresponding to each mark;
After obtaining above-mentioned connected graph, electronic equipment can determine the quantity of target device corresponding to each mark.Through After crossing the operation of above-mentioned steps S303, some identify corresponding target device quantity may for 0, and some marks to mesh The quantity of marking device may be very much.
For example, it is assumed that obtained connected graph is as shown in figure 4, electronic equipment can determine target device corresponding to mark t1 Quantity be 2, identify t2 corresponding to target device quantity be 4.
It should be noted that connected graph shown in Fig. 4 is a kind of example, the quantity of equipment to be identified in practical applications May be very much, for example, several hundred, thousands of, for 6 be in Fig. 4 for convenience with it is clear, can not constitute Restriction to the quantity of the equipment to be identified in the embodiment of the present application.
S305, reaches target device corresponding to the mark of the second preset value for the quantity and is determined as the first kind and set extremely It is standby.
Due to the corresponding target device of same mark being closer spatially, so if the corresponding mesh of a mark The quantity of marking device is more, then illustrating that these target devices are collected on together, it is likely that is warping apparatus.So electronics Equipment may determine that whether the quantity of target device corresponding to each mark reaches the second preset value.Wherein, the first preset value It can be set according to factors such as the distance between normal devices, for example, can be 30,40,100 etc., be not specifically limited herein.
If the quantity of the corresponding target device of some mark reaches the second preset value, illustrate its corresponding target device Aggregation extent it is excessively high, reality is not met, then target device corresponding to the mark can be determined as by electronic equipment A kind of warping apparatus.
As it can be seen that in the present embodiment, electronic equipment can construct connected component according to the distance between each target device, in turn It determines first kind warping apparatus, first kind warping apparatus can be accurately determined using which, further increase subsequent exception The recognition accuracy of equipment.
It is above-mentioned according to the first kind warping apparatus and second class as a kind of embodiment of the embodiment of the present invention Warping apparatus the step of determining the warping apparatus in the equipment to be identified, may include:
The first kind warping apparatus is determined as with identical warping apparatus in the second class warping apparatus high-risk different It sets up standby;It is abnormal that the first kind warping apparatus warping apparatus different from the second class warping apparatus is determined as middle danger Equipment.
If it includes identical warping apparatus that above-mentioned first kind warping apparatus, which neutralizes in the second class warping apparatus, illustrate A possibility that these identical warping apparatus are practical warping apparatus is high, so electronic equipment can be by first kind warping apparatus It is determined as high-risk warping apparatus with identical warping apparatus in the second class warping apparatus.
In addition to above-mentioned high-risk warping apparatus, other warping apparatus that first kind warping apparatus and the second class warping apparatus include A possibility that for practical warping apparatus, is also higher, so electronic equipment can be by first kind warping apparatus and the second class warping apparatus Middle different warping apparatus is determined as middle danger warping apparatus.
As it can be seen that in the present embodiment, electronic equipment can be identical with the second class warping apparatus by first kind warping apparatus Warping apparatus be determined as high-risk warping apparatus;By the first kind warping apparatus warping apparatus different from the second class warping apparatus It is determined as middle danger warping apparatus, in this way, being assessed by the grade to warping apparatus, the exception of different risk can be set It is standby to be recorded, so that the warping apparatus to different risk carries out the targetedly processing such as monitoring.
As a kind of embodiment of the embodiment of the present invention, the sequence of the above-mentioned facility information based on each equipment to be identified As a result, the step of determining frequent item set and its frequency of occurrence, may include:
According to the frequency of occurrence sequence from high to low of the facility information of each equipment to be identified, constructed downwards from root node Child node obtains frequent pattern tree (fp tree);The frequent pattern tree (fp tree) is scanned, determine the frequent item set in the frequent pattern tree (fp tree) and its is gone out Occurrence number.
For the ease of determining that frequent item set and its frequency of occurrence, electronic equipment can construct frequent pattern tree (fp tree).Specifically, Electronic equipment first can by the frequency of occurrence of the facility information of each equipment to be identified progress from high to low sequence, and then according to The sequence of the frequency of occurrence of the facility information of each equipment to be identified from high to low, constructs downwards child node from root node, obtains Frequent pattern tree (fp tree).
Wherein, the node in frequent pattern tree (fp tree) includes facility information and its frequency of occurrence, the root in general frequent pattern tree (fp tree) Node does not include any facility information.The facility information of each equipment to be identified corresponds to the Yi Tiaolu in the frequent pattern tree (fp tree) Diameter, the node which includes include the facility information and frequency of occurrence of the equipment to be identified.
As an example it is assumed that the facility information of equipment to be identified is as shown in the table:
Equipment to be identified Facility information
Equipment S1 P, r
Equipment S2 X, p, t, y, q
Equipment S3 p
Equipment S4 R, x, q
Equipment S5 P, r, x, t, y
Equipment S6 T, p, x, y, q
The ranking results that facility information in above table is ranked up according to the sequence of frequency of occurrence from high to low For p, x, y, t, q, r, frequency of occurrence is respectively 5,4,3,3,3.In turn, electronic equipment can setting according to each equipment to be identified The sequence of the frequency of occurrence of standby information from high to low, constructs downwards child node from root node, obtains frequent pattern tree (fp tree).
Specifically, as shown in figure 5, for equipment S1 to be identified, facility information puts in order as p, r.So Electronic equipment just since root node m, constructs downwards a child node m1 comprising facility information p and its frequency of occurrence 1, so Construct the child node m2 of child node m1 again afterwards comprising facility information r and its frequency of occurrence 1, corresponding to equipment S1's to be identified Node path and building finish.
For equipment S2 to be identified, facility information puts in order as p, x, y, t, q, then due to child node m1 packet Facility information p is included, so not in the corresponding child node of building facility information p, but facility information p in node m1 is gone out into occurrence Number increases by 1, then constructs the child node m3 of child node m1 comprising facility information x and its frequency of occurrence 1, then construct child node The child node m4 of m3 comprising facility information y and its frequency of occurrence 1, then construct the child node m5 of child node m4 comprising equipment Information t and its frequency of occurrence 1, then construct the child node m6 of child node m5 comprising facility information q and its frequency of occurrence 1, it is corresponding It is finished in the node path of equipment S2 to be identified and building.
When constructing the corresponding node path of facility information S4, due to putting in order as x, q, r for its facility information, so Construct new child node m8 downwards since root node m comprising facility information x and its frequency of occurrence 1, then construct child node m8 Child node m9 comprising facility information q and its frequency of occurrence 1, then construct the child node m10 of child node m9 comprising equipment Information r and its frequency of occurrence 1 are finished corresponding to the node path of equipment S2 to be identified and building.
Node path corresponding to the facility information of other equipment to be identified is also successively constructed according to this process, finally To obtain frequent pattern tree (fp tree) as shown in Figure 5.The frequent pattern tree (fp tree) includes root node m, and child node m1- child node m10 is wrapped respectively Facility information p, r, x, y, t, q, r, x, q, r are included, corresponding frequency of occurrence is respectively 5,1,3,3,3,2,1,1,1,1.
Next, electronic equipment can scan frequent pattern tree (fp tree), so determine the frequent item set in frequent pattern tree (fp tree) and Its frequency of occurrence, wherein frequent item set be include multiple and different facility informations node set.
As an implementation, electronic equipment can recursively be found out in frequent pattern tree (fp tree) using FP-growth algorithm Frequent item set and its frequency of occurrence.
As it can be seen that in the present embodiment, electronic equipment can be according to the frequency of occurrence of the facility information of each equipment to be identified Sequence from high to low constructs downwards child node from root node, and then obtains frequent pattern tree (fp tree), and then scans the frequent mode Tree, determine the frequent item set and its frequency of occurrence in frequent pattern tree (fp tree), in this way, can rapidly construct frequent pattern tree (fp tree) and really Determine the frequent item set and its frequency of occurrence in frequent pattern tree (fp tree), warping apparatus is identified convenient for subsequent.
As a kind of embodiment of the embodiment of the present invention, as shown in fig. 6, above-mentioned according to the frequent item set and its appearance Number the step of determining the warping apparatus in the equipment to be identified, may include:
The frequent item set that quantity including facility information reaches third preset value is determined as alternative frequent item set by S601;
A possibility that frequent item set corresponding for warping apparatus due to the very few frequent item set of the quantity for including facility information It is smaller, so electronic equipment may determine that frequent item set and include whether the quantity of facility information reaches third preset value.Wherein, Three preset values can be determined according to factors such as the type of the facility information included by normal device and specifying informations, for example, can be with It is 4,5,8 etc..
If the quantity that frequent item set includes facility information reaches third preset value, illustrate that the frequent item set is warping apparatus A possibility that corresponding frequent item set, is higher, so the quantity including facility information can be reached third preset value by electronic equipment Frequent item set be determined as alternative frequent item set.
The alternative frequent item set that frequency of occurrence reaches preset times is determined as abnormally frequent item collection by S602;
Illustrate that the frequent item set only occurs from the facility information of a small number of equipment to be identified since frequency of occurrence is less, i.e., A possibility that there are many quantity for the facility information for making it include, which is warping apparatus corresponding frequent item set are also not It is very high, so electronic equipment may determine that whether the frequency of occurrence of alternative frequent item set reaches preset times.Wherein, preset times It can be determined according to factors such as the frequency of occurrence of the facility information included by normal device, for example, can be 10,12,15 etc..
If the frequency of occurrence of alternative frequent item set reaches preset times, illustrate that the alternative frequent item set is warping apparatus pair A possibility that frequent item set answered, is very high, so frequency of occurrence can be reached the alternative frequent item set of preset times by electronic equipment It is determined as abnormally frequent item collection.
The equipment to be identified that facility information includes the corresponding facility information of the abnormally frequent item collection is determined as different by S603 It sets up standby.
In turn, facility information can be included abnormally frequent item collection pair after determining abnormally frequent item collection by electronic equipment The equipment to be identified for the facility information answered is determined as warping apparatus.
As it can be seen that in the present embodiment, electronic equipment can will include that the quantity of facility information reaches the frequency of third preset value Numerous item collection is determined as alternative frequent item set, the alternative frequency frequent item set that frequency of occurrence reaches preset times is determined as abnormally frequent Item collection, and then the equipment to be identified that facility information includes the corresponding facility information of abnormally frequent item collection is determined as warping apparatus. In this way, electronic equipment can identify warping apparatus as precisely as possible, the recognition accuracy of warping apparatus is improved.
As a kind of embodiment of the embodiment of the present invention, the above-mentioned facility information by each equipment to be identified according to Before the step of frequency of occurrence is ranked up, and obtains ranking results, the above method can also include:
Facility information by frequency of occurrence lower than the 4th preset value removes.
Due to the lower facility information of frequency of occurrence be warping apparatus facility information a possibility that it is smaller, so in order to subtract The data volume of few subsequent processing, improves recognition efficiency, and electronic equipment can believe frequency of occurrence lower than the equipment of the 4th preset value Breath removal.
Wherein, the 4th preset value can be set according to factors such as the frequencies of occurrences of the facility information of normal device, for example, can Think 1,3,5 etc., is not specifically limited herein.
Correspondingly, the above-mentioned facility information by each equipment to be identified is ranked up according to frequency of occurrence, sorted As a result the step of may include:
The facility information of each equipment to be identified after removal is ranked up according to frequency of occurrence, obtains sequence knot Fruit.
Electronic equipment by frequency of occurrence lower than the 4th preset value facility information removal after, can by after removal respectively to The facility information of identification equipment is ranked up according to frequency of occurrence, and then obtains ranking results.
As it can be seen that in the present embodiment, be ranked up in the above-mentioned facility information by each equipment to be identified according to frequency of occurrence, Before the step of obtaining ranking results, electronic equipment can be removed frequency of occurrence lower than the facility information of the 4th preset value, this Sample can reduce the data volume of subsequent processing, improve the recognition efficiency of warping apparatus.
Corresponding to the recognition methods of above-mentioned warping apparatus, the embodiment of the invention also provides a kind of identification of warping apparatus dresses It sets.
The identification device for being provided for the embodiments of the invention a kind of warping apparatus below is introduced.
As shown in fig. 7, a kind of identification device of warping apparatus, which is characterized in that described device includes:
Apparatus information acquiring module 710, for obtaining the facility information of each equipment to be identified;
Frequency of occurrence sorting module 720, for carrying out the facility information of each equipment to be identified according to frequency of occurrence Sequence, obtains ranking results;
Frequent item set determining module 730 determines frequency for the ranking results of the facility information based on each equipment to be identified Numerous item collection and its frequency of occurrence;
Wherein, the frequent item set is the set of multiple and different facility informations.
Warping apparatus determining module 740, for according to the frequent item set and its frequency of occurrence, determining described to be identified set Warping apparatus in standby.
As it can be seen that the equipment of the available each equipment to be identified of electronic equipment is believed in scheme provided by the embodiment of the present invention Breath;The facility information of each equipment to be identified is ranked up according to frequency of occurrence, obtains ranking results;It to be identified is set based on each The ranking results of standby facility information determine frequent item set and its frequency of occurrence, wherein frequent item set is multiple and different equipment The set of information;According to frequent item set and its frequency of occurrence, the warping apparatus in equipment to be identified is determined.It is artificial due to not needing Data analysis and Rulemaking are carried out, therefore can timely and effectively identify warping apparatus, improves the recognition efficiency of warping apparatus And accuracy rate.
As a kind of embodiment of the embodiment of the present invention, above-mentioned apparatus can also include:
Location information obtains module (being not shown in Fig. 7), for described according to the frequent item set and its frequency of occurrence, Before determining the warping apparatus in the equipment to be identified, the location information of each equipment to be identified is obtained;
Abnormal jump equipment determining module (being not shown in Fig. 7), for according to the location information and pre-determined distance threshold value And/or pre-set velocity threshold value, determine the abnormal jump equipment in each equipment to be identified;
Abnormal aggregation equipment determining module (being not shown in Fig. 7), for determining according to the location information and preset quantity Abnormal aggregation equipment in each equipment to be identified, wherein the preset quantity is the normal of distribution within the scope of predeterminable area The quantity of equipment;
First kind warping apparatus determining module (being not shown in Fig. 7), for based on the abnormal jump equipment and described different Normal aggregation equipment determines first kind warping apparatus;
Above-mentioned warping apparatus determining module 740 may include:
Second class warping apparatus determination unit (being not shown in Fig. 7) is used for according to the frequent item set and its frequency of occurrence, Determine the second class warping apparatus in the equipment to be identified;
First warping apparatus determination unit (being not shown in Fig. 7), for according to the first kind warping apparatus and described the Two class warping apparatus determine the warping apparatus in the equipment to be identified.
As a kind of embodiment of the embodiment of the present invention, above-mentioned first kind warping apparatus determining module may include:
Serial number identifies allocation unit (being not shown in Fig. 7), for being each target device Allotment Serial Number and mark, wherein The target device includes the abnormal jump equipment and the abnormal aggregation equipment;
Connected component determination unit (is not shown) in Fig. 7, for the target device using distance less than the first preset value as one A connected component;
It identifies determination unit (being not shown in Fig. 7), for by the mark of the smallest target device of serial number in the connected component As the mark of the connected component, until the mark of all connected components does not change;
Target device quantity determination unit (being not shown in Fig. 7), for determining target device corresponding to each mark Quantity;
First kind warping apparatus determination unit, for the quantity to be reached to target corresponding to the mark of the second preset value Equipment is determined as first kind warping apparatus.
As a kind of embodiment of the embodiment of the present invention, above-mentioned first warping apparatus determination unit may include:
High-risk warping apparatus determines subelement (being not shown in Fig. 7), for by the first kind warping apparatus and described the Identical warping apparatus is determined as high-risk warping apparatus in two class warping apparatus;
Middle danger warping apparatus determines subelement (being not shown in Fig. 7), for by the first kind warping apparatus and described the Different warping apparatus is determined as middle danger warping apparatus in two class warping apparatus.
As a kind of embodiment of the embodiment of the present invention, above-mentioned frequent item set determining module 730 may include:
Frequent pattern tree (fp tree) construction unit (is not shown) in Fig. 7, for going out for the facility information according to each equipment to be identified The sequence of occurrence number from high to low, constructs downwards child node from root node, obtains frequent pattern tree (fp tree);
Frequent item set determination unit (is not shown) in Fig. 7, for scanning the frequent pattern tree (fp tree), determines the frequent mode Frequent item set and its frequency of occurrence in tree.
Wherein, the frequent item set be include multiple and different facility informations node set.
As a kind of embodiment of the embodiment of the present invention, above-mentioned warping apparatus determining module 740 may include:
Alternative frequent item set determination unit (being not shown in Fig. 7), for will include that reach third pre- for the quantity of facility information If the frequent item set of value is determined as alternative frequent item set;
Abnormally frequent item collection determination unit (being not shown in Fig. 7), for frequency of occurrence to be reached to the alternative frequency of preset times Frequent item set is determined as abnormally frequent item collection;
Second warping apparatus determination unit (being not shown in Fig. 7), for will include the abnormally frequent item in facility information The equipment to be identified for collecting corresponding facility information is determined as warping apparatus.
As a kind of embodiment of the embodiment of the present invention, above-mentioned apparatus can also include:
Facility information removes module (being not shown in Fig. 7), in the facility information by each equipment to be identified It is ranked up according to frequency of occurrence, before obtaining ranking results, the facility information by frequency of occurrence lower than the 4th preset value is removed;
Above-mentioned frequency of occurrence sorting module 720 may include:
Frequency of occurrence sequencing unit (is not shown) in Fig. 7, and the equipment for each equipment to be identified after removing is believed Breath is ranked up according to frequency of occurrence, obtains ranking results.
The embodiment of the invention also provides a kind of electronic equipment, as shown in figure 8, electronic equipment may include processor 801, Communication interface 802, memory 803 and communication bus 804, wherein processor 801, communication interface 802, memory 803 pass through logical Letter bus 804 completes mutual communication,
Memory 803, for storing computer program;
Processor 801 when for executing the program stored on memory 803, realizes following steps:
Obtain the facility information of each equipment to be identified;
The facility information of each equipment to be identified is ranked up according to frequency of occurrence, obtains ranking results;
The ranking results of facility information based on each equipment to be identified, determine frequent item set and its frequency of occurrence;
Wherein, the frequent item set is the set of multiple and different facility informations.
According to the frequent item set and its frequency of occurrence, the warping apparatus in the equipment to be identified is determined.
As it can be seen that the equipment of the available each equipment to be identified of electronic equipment is believed in scheme provided by the embodiment of the present invention Breath;The facility information of each equipment to be identified is ranked up according to frequency of occurrence, obtains ranking results;It to be identified is set based on each The ranking results of standby facility information determine frequent item set and its frequency of occurrence, wherein frequent item set is multiple and different equipment The set of information;According to frequent item set and its frequency of occurrence, the warping apparatus in equipment to be identified is determined.It is artificial due to not needing Data analysis and Rulemaking are carried out, therefore can timely and effectively identify warping apparatus, improves the recognition efficiency of warping apparatus And accuracy rate.
The communication bus that above-mentioned electronic equipment is mentioned can be Peripheral Component Interconnect standard (Peripheral Component Interconnect, PCI) bus or expanding the industrial standard structure (Extended Industry Standard Architecture, EISA) bus etc..The communication bus can be divided into address bus, data/address bus, control bus etc..For just It is only indicated with a thick line in expression, figure, it is not intended that an only bus or a type of bus.
Communication interface is for the communication between above-mentioned electronic equipment and other equipment.
Memory may include random access memory (Random Access Memory, RAM), also may include non-easy The property lost memory (Non-Volatile Memory, NVM), for example, at least a magnetic disk storage.Optionally, memory may be used also To be storage device that at least one is located remotely from aforementioned processor.
Above-mentioned processor can be general processor, including central processing unit (Central Processing Unit, CPU), network processing unit (Network Processor, NP) etc.;It can also be digital signal processor (Digital Signal Processing, DSP), it is specific integrated circuit (Application Specific Integrated Circuit, ASIC), existing It is field programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic device, discrete Door or transistor logic, discrete hardware components.
As a kind of embodiment of the embodiment of the present invention, above-mentioned according to the frequent item set and its frequency of occurrence, really Before the step of determining the warping apparatus in the equipment to be identified, the above method can also include:
Obtain the location information of each equipment to be identified;
According to the location information and pre-determined distance threshold value and/or pre-set velocity threshold value, each equipment to be identified is determined In abnormal jump equipment;
According to the location information and preset quantity, the abnormal aggregation equipment in each equipment to be identified is determined;
Wherein, the preset quantity is the quantity for the normal device being distributed within the scope of predeterminable area;
Based on the abnormal jump equipment and the abnormal aggregation equipment, first kind warping apparatus is determined;
It is above-mentioned according to the frequent item set and its frequency of occurrence, determine the step of the warping apparatus in the equipment to be identified Suddenly, may include:
According to the frequent item set and its frequency of occurrence, the second class warping apparatus in the equipment to be identified is determined;
According to the first kind warping apparatus and the second class warping apparatus, the exception in the equipment to be identified is determined Equipment.
It is above-mentioned based on the abnormal jump equipment and the abnormal aggregation as a kind of embodiment of the embodiment of the present invention Equipment the step of determining first kind warping apparatus, may include:
For each target device Allotment Serial Number and mark, wherein the target device include the abnormal jump equipment and The abnormal aggregation equipment;
Target device using distance less than the first preset value is as a connected component;
Mark by the mark of the smallest target device of serial number in the connected component as the connected component, until all companies The mark of entire body does not change;
Determine the quantity of target device corresponding to each mark;
The quantity is reached into target device corresponding to the mark of the second preset value and is determined as first kind warping apparatus.
It is above-mentioned according to the first kind warping apparatus and second class as a kind of embodiment of the embodiment of the present invention Warping apparatus the step of determining the warping apparatus in the equipment to be identified, may include:
The first kind warping apparatus is determined as with identical warping apparatus in the second class warping apparatus high-risk different It sets up standby;
It is different that the first kind warping apparatus warping apparatus different from the second class warping apparatus is determined as middle danger It sets up standby.
As a kind of embodiment of the embodiment of the present invention, the sequence of the above-mentioned facility information based on each equipment to be identified As a result, the step of determining frequent item set and its frequency of occurrence, may include:
According to the frequency of occurrence sequence from high to low of the facility information of each equipment to be identified, constructed downwards from root node Child node obtains frequent pattern tree (fp tree);
The frequent pattern tree (fp tree) is scanned, determines frequent item set and its frequency of occurrence in the frequent pattern tree (fp tree).
Wherein, the frequent item set be include multiple and different facility informations node set.
It is above-mentioned according to the frequent item set and its frequency of occurrence as a kind of embodiment of the embodiment of the present invention, it determines The step of warping apparatus in the equipment to be identified, may include:
The frequent item set that quantity including facility information reaches third preset value is determined as alternative frequent item set;
The alternative frequency frequent item set that frequency of occurrence reaches preset times is determined as abnormally frequent item collection;
It will include that the equipment to be identified of the corresponding facility information of the abnormally frequent item collection is determined as exception in facility information Equipment.
As a kind of embodiment of the embodiment of the present invention, the above-mentioned facility information by each equipment to be identified according to Before the step of frequency of occurrence is ranked up, and obtains ranking results, the above method can also include:
Facility information by frequency of occurrence lower than the 4th preset value removes;
The above-mentioned facility information by each equipment to be identified is ranked up according to frequency of occurrence, obtains the step of ranking results Suddenly, may include:
The facility information of each equipment to be identified after removal is ranked up according to frequency of occurrence, obtains sequence knot Fruit.
The embodiment of the invention also provides a kind of computer readable storage medium, the computer readable storage medium memory Computer program is contained, the computer program performs the steps of when being executed by processor
Obtain the facility information of each equipment to be identified;
The facility information of each equipment to be identified is ranked up according to frequency of occurrence, obtains ranking results;
The ranking results of facility information based on each equipment to be identified, determine frequent item set and its frequency of occurrence;
Wherein, the frequent item set is the set of multiple and different facility informations.
According to the frequent item set and its frequency of occurrence, the warping apparatus in the equipment to be identified is determined.
As it can be seen that in scheme provided by the embodiment of the present invention, when computer program is executed by processor, it is available respectively to Identify the facility information of equipment;The facility information of each equipment to be identified is ranked up according to frequency of occurrence, obtains ranking results; The ranking results of facility information based on each equipment to be identified, determine frequent item set and its frequency of occurrence, wherein frequent item set For the set of multiple and different facility informations;According to frequent item set and its frequency of occurrence, determine that the exception in equipment to be identified is set It is standby.Due to not needing manually to carry out data analysis and Rulemaking, it can timely and effectively identify warping apparatus, improve different Set up standby recognition efficiency and accuracy rate.
As a kind of embodiment of the embodiment of the present invention, above-mentioned according to the frequent item set and its frequency of occurrence, really Before the step of determining the warping apparatus in the equipment to be identified, the above method can also include:
Obtain the location information of each equipment to be identified;
According to the location information and pre-determined distance threshold value and/or pre-set velocity threshold value, each equipment to be identified is determined In abnormal jump equipment;
According to the location information and preset quantity, the abnormal aggregation equipment in each equipment to be identified is determined;
Wherein, the preset quantity is the quantity for the normal device being distributed within the scope of predeterminable area;
Based on the abnormal jump equipment and the abnormal aggregation equipment, first kind warping apparatus is determined;
It is above-mentioned according to the frequent item set and its frequency of occurrence, determine the step of the warping apparatus in the equipment to be identified Suddenly, may include:
According to the frequent item set and its frequency of occurrence, the second class warping apparatus in the equipment to be identified is determined;
According to the first kind warping apparatus and the second class warping apparatus, the exception in the equipment to be identified is determined Equipment.
It is above-mentioned based on the abnormal jump equipment and the abnormal aggregation as a kind of embodiment of the embodiment of the present invention Equipment the step of determining first kind warping apparatus, may include:
For each target device Allotment Serial Number and mark, wherein the target device include the abnormal jump equipment and The abnormal aggregation equipment;
Target device using distance less than the first preset value is as a connected component;
Mark by the mark of the smallest target device of serial number in the connected component as the connected component, until all companies The mark of entire body does not change;
Determine the quantity of target device corresponding to each mark;
The quantity is reached into target device corresponding to the mark of the second preset value and is determined as first kind warping apparatus.
It is above-mentioned according to the first kind warping apparatus and second class as a kind of embodiment of the embodiment of the present invention Warping apparatus the step of determining the warping apparatus in the equipment to be identified, may include:
The first kind warping apparatus is determined as with identical warping apparatus in the second class warping apparatus high-risk different It sets up standby;
It is different that the first kind warping apparatus warping apparatus different from the second class warping apparatus is determined as middle danger It sets up standby.
As a kind of embodiment of the embodiment of the present invention, the sequence of the above-mentioned facility information based on each equipment to be identified As a result, the step of determining frequent item set and its frequency of occurrence, may include:
According to the frequency of occurrence sequence from high to low of the facility information of each equipment to be identified, constructed downwards from root node Child node obtains frequent pattern tree (fp tree);
The frequent pattern tree (fp tree) is scanned, determines frequent item set and its frequency of occurrence in the frequent pattern tree (fp tree).
Wherein, the frequent item set be include multiple and different facility informations node set.
It is above-mentioned according to the frequent item set and its frequency of occurrence as a kind of embodiment of the embodiment of the present invention, it determines The step of warping apparatus in the equipment to be identified, may include:
The frequent item set that quantity including facility information reaches third preset value is determined as alternative frequent item set;
The alternative frequency frequent item set that frequency of occurrence reaches preset times is determined as abnormally frequent item collection;
It will include that the equipment to be identified of the corresponding facility information of the abnormally frequent item collection is determined as exception in facility information Equipment.
As a kind of embodiment of the embodiment of the present invention, the above-mentioned facility information by each equipment to be identified according to Before the step of frequency of occurrence is ranked up, and obtains ranking results, the above method can also include:
Facility information by frequency of occurrence lower than the 4th preset value removes;
The above-mentioned facility information by each equipment to be identified is ranked up according to frequency of occurrence, obtains the step of ranking results Suddenly, may include:
The facility information of each equipment to be identified after removal is ranked up according to frequency of occurrence, obtains sequence knot Fruit.
It should be noted that for above-mentioned apparatus, electronic equipment and computer readable storage medium embodiment, due to It is substantially similar to embodiment of the method, so being described relatively simple, related place is referring to the part explanation of embodiment of the method It can.
Need further exist for explanation, herein, relational terms such as first and second and the like be used merely to by One entity or operation are distinguished with another entity or operation, without necessarily requiring or implying these entities or operation Between there are any actual relationship or orders.Moreover, the terms "include", "comprise" or its any other variant meaning Covering non-exclusive inclusion, so that the process, method, article or equipment for including a series of elements not only includes that A little elements, but also including other elements that are not explicitly listed, or further include for this process, method, article or The intrinsic element of equipment.In the absence of more restrictions, the element limited by sentence "including a ...", is not arranged Except there is also other identical elements in the process, method, article or apparatus that includes the element.
Each embodiment in this specification is all made of relevant mode and describes, same and similar portion between each embodiment Dividing may refer to each other, and each embodiment focuses on the differences from other embodiments.
The foregoing is merely illustrative of the preferred embodiments of the present invention, is not intended to limit the scope of the present invention.It is all Any modification, equivalent replacement, improvement and so within the spirit and principles in the present invention, are all contained in protection scope of the present invention It is interior.

Claims (16)

1. a kind of recognition methods of warping apparatus, which is characterized in that the described method includes:
Obtain the facility information of each equipment to be identified;
The facility information of each equipment to be identified is ranked up according to frequency of occurrence, obtains ranking results;
The ranking results of facility information based on each equipment to be identified, determine frequent item set and its frequency of occurrence, wherein described Frequent item set is the set of multiple and different facility informations;
According to the frequent item set and its frequency of occurrence, the warping apparatus in the equipment to be identified is determined.
2. the method as described in claim 1, which is characterized in that described according to the frequent item set and its frequency of occurrence, really Before the step of determining the warping apparatus in the equipment to be identified, the method also includes:
Obtain the location information of each equipment to be identified;
According to the location information and pre-determined distance threshold value and/or pre-set velocity threshold value, determine in each equipment to be identified Abnormal jump equipment;
According to the location information and preset quantity, the abnormal aggregation equipment in each equipment to be identified is determined, wherein described Preset quantity is the quantity for the normal device being distributed within the scope of predeterminable area;
Based on the abnormal jump equipment and the abnormal aggregation equipment, first kind warping apparatus is determined;
It is described according to the frequent item set and its frequency of occurrence, the step of determining the warping apparatus in the equipment to be identified, packet It includes:
According to the frequent item set and its frequency of occurrence, the second class warping apparatus in the equipment to be identified is determined;
According to the first kind warping apparatus and the second class warping apparatus, determine that the exception in the equipment to be identified is set It is standby.
3. method according to claim 2, which is characterized in that described based on the abnormal jump equipment and the abnormal aggregation Equipment, the step of determining first kind warping apparatus, comprising:
For each target device Allotment Serial Number and mark, wherein the target device includes the abnormal jump equipment and described Abnormal aggregation equipment;
Target device using distance less than the first preset value is as a connected component;
Mark by the mark of the smallest target device of serial number in the connected component as the connected component, until all connected components Mark do not change;
Determine the quantity of target device corresponding to each mark;
The quantity is reached into target device corresponding to the mark of the second preset value and is determined as first kind warping apparatus.
4. method according to claim 2, which is characterized in that described according to the first kind warping apparatus and second class Warping apparatus, the step of determining the warping apparatus in the equipment to be identified, comprising:
The first kind warping apparatus is determined as high-risk exception with identical warping apparatus in the second class warping apparatus to set It is standby;
The first kind warping apparatus warping apparatus different from the second class warping apparatus is determined as middle danger to set extremely It is standby.
5. the method as described in claim 1, which is characterized in that the sequence of the facility information based on each equipment to be identified As a result, the step of determining frequent item set and its frequency of occurrence, comprising:
According to the frequency of occurrence sequence from high to low of the facility information of each equipment to be identified, son section is constructed downwards from root node Point, obtains frequent pattern tree (fp tree);
The frequent pattern tree (fp tree) is scanned, determines frequent item set and its frequency of occurrence in the frequent pattern tree (fp tree), wherein the frequency Numerous item collection be include multiple and different facility informations node set.
6. the method as described in claim 1, which is characterized in that it is described according to the frequent item set and its frequency of occurrence, it determines The step of warping apparatus in the equipment to be identified, comprising:
The frequent item set that quantity including facility information reaches third preset value is determined as alternative frequent item set;
The alternative frequency frequent item set that frequency of occurrence reaches preset times is determined as abnormally frequent item collection;
It will include that the equipment to be identified of the corresponding facility information of the abnormally frequent item collection is determined as warping apparatus in facility information.
7. as the method according to claim 1 to 6, which is characterized in that in the equipment by each equipment to be identified Before the step of information is ranked up according to frequency of occurrence, obtains ranking results, the method also includes:
Facility information by frequency of occurrence lower than the 4th preset value removes;
The step of facility information by each equipment to be identified is ranked up according to frequency of occurrence, obtains ranking results, Include:
The facility information of each equipment to be identified after removal is ranked up according to frequency of occurrence, obtains ranking results.
8. a kind of identification device of warping apparatus, which is characterized in that described device includes:
Apparatus information acquiring module, for obtaining the facility information of each equipment to be identified;
Frequency of occurrence sorting module is obtained for the facility information of each equipment to be identified to be ranked up according to frequency of occurrence To ranking results;
Frequent item set determining module determines frequent item set for the ranking results of the facility information based on each equipment to be identified And its frequency of occurrence, wherein the frequent item set is the set of multiple and different facility informations;
Warping apparatus determining module, for determining in the equipment to be identified according to the frequent item set and its frequency of occurrence Warping apparatus.
9. device as claimed in claim 8, which is characterized in that described device further include:
Location information obtains module, for according to the frequent item set and its frequency of occurrence, determining described to be identified set described Before warping apparatus in standby, the location information of each equipment to be identified is obtained;
Abnormal jump equipment determining module, is used for according to the location information and pre-determined distance threshold value and/or pre-set velocity threshold value, Determine the abnormal jump equipment in each equipment to be identified;
Abnormal aggregation equipment determining module, for determining each equipment to be identified according to the location information and preset quantity In abnormal aggregation equipment, wherein the preset quantity be predeterminable area in distribution normal device quantity;
First kind warping apparatus determining module, for based on the abnormal jump equipment and the abnormal aggregation equipment, determining the A kind of warping apparatus;
The warping apparatus determining module includes:
Second class warping apparatus determination unit, for according to the frequent item set and its frequency of occurrence, determining described to be identified set The second class warping apparatus in standby;
First warping apparatus determination unit, for determining according to the first kind warping apparatus and the second class warping apparatus Warping apparatus in the equipment to be identified.
10. device as claimed in claim 9, which is characterized in that the first kind warping apparatus determining module includes:
Serial number identifies allocation unit, for being each target device Allotment Serial Number and mark, wherein the target device includes institute State abnormal jump equipment and the abnormal aggregation equipment;
Connected component determination unit, for the target device using distance less than the first preset value as a connected component;
Determination unit is identified, for the mark by the mark of the smallest target device of serial number in the connected component as the connected component Know, until the mark of all connected components does not change;
Target device quantity determination unit, for determining the quantity of target device corresponding to each mark;
First kind warping apparatus determination unit, for the quantity to be reached to target device corresponding to the mark of the second preset value It is determined as first kind warping apparatus.
11. device as claimed in claim 9, which is characterized in that the first warping apparatus determination unit includes:
High-risk warping apparatus determines subelement, for the first kind warping apparatus is identical with the second class warping apparatus Warping apparatus be determined as high-risk warping apparatus;
Middle danger warping apparatus determines subelement, for the first kind warping apparatus is different from the second class warping apparatus Warping apparatus be determined as middle danger warping apparatus.
12. device as claimed in claim 8, which is characterized in that the frequent item set determining module includes:
Frequent pattern tree (fp tree) construction unit, frequency of occurrence for the facility information according to each equipment to be identified from high to low suitable Sequence constructs downwards child node from root node, obtains frequent pattern tree (fp tree);
Frequent item set determination unit, for scanning the frequent pattern tree (fp tree), determine frequent item set in the frequent pattern tree (fp tree) and Its frequency of occurrence, wherein the frequent item set be include multiple and different facility informations node set.
13. device as claimed in claim 8, which is characterized in that the warping apparatus determining module includes:
Alternative frequent item set determination unit, for will include that the quantity of facility information reaches the frequent item set determination of third preset value For alternative frequent item set;
Abnormally frequent item collection determination unit, the alternative frequency frequent item set for frequency of occurrence to be reached preset times are determined as exception Frequent item set;
Second warping apparatus determination unit, for will include the corresponding facility information of the abnormally frequent item collection in facility information Equipment to be identified is determined as warping apparatus.
14. such as the described in any item devices of claim 8-13, which is characterized in that described device further include:
Facility information removes module, for arranging in the facility information by each equipment to be identified according to frequency of occurrence Sequence, before obtaining ranking results, the facility information by frequency of occurrence lower than the 4th preset value is removed;
The frequency of occurrence sorting module includes:
Frequency of occurrence sequencing unit, for carrying out the facility information of each equipment to be identified after removal according to frequency of occurrence Sequence, obtains ranking results.
15. a kind of electronic equipment, which is characterized in that including processor, communication interface, memory and communication bus, wherein processing Device, communication interface, memory complete mutual communication by communication bus;
Memory, for storing computer program;
Processor when for executing the program stored on memory, realizes method and step as claimed in claim 1 to 7.
16. a kind of computer readable storage medium, which is characterized in that be stored with computer in the computer readable storage medium Program, the computer program realize method and step as claimed in claim 1 to 7 when being executed by processor.
CN201910442079.6A 2019-05-24 2019-05-24 Abnormal equipment identification method and device, electronic equipment and storage medium Active CN110209551B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910442079.6A CN110209551B (en) 2019-05-24 2019-05-24 Abnormal equipment identification method and device, electronic equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910442079.6A CN110209551B (en) 2019-05-24 2019-05-24 Abnormal equipment identification method and device, electronic equipment and storage medium

Publications (2)

Publication Number Publication Date
CN110209551A true CN110209551A (en) 2019-09-06
CN110209551B CN110209551B (en) 2023-12-08

Family

ID=67788657

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910442079.6A Active CN110209551B (en) 2019-05-24 2019-05-24 Abnormal equipment identification method and device, electronic equipment and storage medium

Country Status (1)

Country Link
CN (1) CN110209551B (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111027023A (en) * 2019-12-11 2020-04-17 重庆锐云科技有限公司 House property online opening detection method and system based on frequent analysis
CN111199417A (en) * 2019-11-29 2020-05-26 北京深演智能科技股份有限公司 Identification method and device for virtual equipment ID
CN113568828A (en) * 2021-06-30 2021-10-29 北京达佳互联信息技术有限公司 Abnormal terminal equipment identification method and device, electronic equipment and storage medium
CN114221858A (en) * 2021-12-15 2022-03-22 中山大学 SDN network fault positioning method, device, equipment and readable storage medium

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101640594A (en) * 2008-07-31 2010-02-03 北京启明星辰信息技术股份有限公司 Method and unit for extracting traffic attack message characteristics on network equipment
CN105681312A (en) * 2016-01-28 2016-06-15 李青山 Mobile internet exceptional user detection method based on frequent itemset mining
US20180107695A1 (en) * 2016-10-19 2018-04-19 Futurewei Technologies, Inc. Distributed fp-growth with node table for large-scale association rule mining
CN108055281A (en) * 2017-12-27 2018-05-18 百度在线网络技术(北京)有限公司 Account method for detecting abnormality, device, server and storage medium
CN109120629A (en) * 2018-08-31 2019-01-01 新华三信息安全技术有限公司 A kind of abnormal user recognition methods and device

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101640594A (en) * 2008-07-31 2010-02-03 北京启明星辰信息技术股份有限公司 Method and unit for extracting traffic attack message characteristics on network equipment
CN105681312A (en) * 2016-01-28 2016-06-15 李青山 Mobile internet exceptional user detection method based on frequent itemset mining
US20180107695A1 (en) * 2016-10-19 2018-04-19 Futurewei Technologies, Inc. Distributed fp-growth with node table for large-scale association rule mining
CN108055281A (en) * 2017-12-27 2018-05-18 百度在线网络技术(北京)有限公司 Account method for detecting abnormality, device, server and storage medium
CN109120629A (en) * 2018-08-31 2019-01-01 新华三信息安全技术有限公司 A kind of abnormal user recognition methods and device

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111199417A (en) * 2019-11-29 2020-05-26 北京深演智能科技股份有限公司 Identification method and device for virtual equipment ID
CN111027023A (en) * 2019-12-11 2020-04-17 重庆锐云科技有限公司 House property online opening detection method and system based on frequent analysis
CN113568828A (en) * 2021-06-30 2021-10-29 北京达佳互联信息技术有限公司 Abnormal terminal equipment identification method and device, electronic equipment and storage medium
CN114221858A (en) * 2021-12-15 2022-03-22 中山大学 SDN network fault positioning method, device, equipment and readable storage medium

Also Published As

Publication number Publication date
CN110209551B (en) 2023-12-08

Similar Documents

Publication Publication Date Title
CN110209551A (en) A kind of recognition methods of warping apparatus, device, electronic equipment and storage medium
CN109784636A (en) Fraudulent user recognition methods, device, computer equipment and storage medium
CN109409329B (en) Method, device, equipment and storage medium for distinguishing and evaluating graphic subjects
CN111382808A (en) Vehicle detection processing method and device
CN109086734A (en) The method and device that pupil image is positioned in a kind of pair of eye image
CN109508405B (en) Method and device for determining recommended video, electronic equipment and storage medium
CN108241853A (en) A kind of video frequency monitoring method, system and terminal device
CN109598307A (en) Data screening method, apparatus, server and storage medium
CN113268641B (en) User data processing method based on big data and big data server
CN108280096A (en) Data cleaning method and data cleansing device
CN110503143A (en) Research on threshold selection, equipment, storage medium and device based on intention assessment
CN109284700B (en) Method, storage medium, device and system for detecting multiple faces in image
CN112954626A (en) Mobile phone signaling data analysis method and device, electronic equipment and storage medium
CN109819128A (en) A kind of quality detecting method and device of telephonograph
CN110502432B (en) Intelligent test method, device, equipment and readable storage medium
CN111475402A (en) Program function testing method and related device
CN104933178B (en) Official website determines method and system and the sort method of official website
CN106257507A (en) The methods of risk assessment of user behavior and device
CN109785380A (en) Inscribed circle determining method and device
CN109830001A (en) A kind of Data Quality Assessment Methodology and device
US20130013244A1 (en) Pattern based test prioritization using weight factors
CN108399387A (en) The data processing method and device of target group for identification
CN108846119B (en) Word cognition ranking method, storage device and mobile terminal
CN109977745B (en) Face image processing method and related device
CN111539390A (en) Small target image identification method, equipment and system based on Yolov3

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant