CN110995687B - Cat pool equipment identification method, device, equipment and storage medium - Google Patents
Cat pool equipment identification method, device, equipment and storage medium Download PDFInfo
- Publication number
- CN110995687B CN110995687B CN201911176112.1A CN201911176112A CN110995687B CN 110995687 B CN110995687 B CN 110995687B CN 201911176112 A CN201911176112 A CN 201911176112A CN 110995687 B CN110995687 B CN 110995687B
- Authority
- CN
- China
- Prior art keywords
- equipment
- target
- data
- characteristic data
- cat pool
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
- H04L63/1416—Event detection, e.g. attack signature detection
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2101/00—Indexing scheme associated with group H04L61/00
- H04L2101/60—Types of network addresses
- H04L2101/618—Details of network addresses
- H04L2101/622—Layer-2 addresses, e.g. medium access control [MAC] addresses
Abstract
The embodiment of the invention discloses a method, a device, equipment and a storage medium for identifying cat pool equipment, wherein the method comprises the following steps: acquiring and recording equipment behaviors in a buried point mode to obtain buried point data; determining first characteristic data according to the buried point data and the characteristics of the equipment, wherein the first characteristic data comprises the characteristic type of the core characteristics of the equipment; and determining whether the target equipment is cat pool equipment or not according to the first characteristic data of the target equipment. The scheme of the embodiment of the invention realizes the rapid and accurate identification of the cat pool equipment and restrains the occurrence of black production from the source.
Description
Technical Field
The embodiment of the invention relates to the technical field of network security, in particular to a cat pool equipment identification method, a cat pool equipment identification device, cat pool equipment identification equipment and a storage medium.
Background
The cat pool refers to that a plurality of devices are associated through a computer, wherein each device in the cat pool can correspond to a plurality of account numbers, and the devices in the cat pool can be operated uniformly through the computer. Based on this, at present, a large number of illegal users perform illegal activities such as high interest and loan, marketing, user data selling, and pornography through the cat pool device, and these activities are also called black industrial activities, which are called black productions for short.
At present, cat pools are mainly divided into two types, one type is multi-card group control, that is, a plurality of Subscriber Identity Modules (SIM) are inserted into one device, and the Identification of cat pool devices is realized mainly by identifying abnormal numbers; the other type is multi-device multi-account group control, which mainly realizes the identification of cat pool devices by identifying abnormal accounts.
The cat pool identification method in the prior art is mostly aimed at identification of first-class multi-card group-control cat pool devices, but has a poor identification effect on second-class cat pool devices, and actually, an illegal user benefits mainly through the second-class cat pool devices, so that it is necessary to design a method for quickly and accurately identifying the second-class cat pool devices.
Disclosure of Invention
The embodiment of the invention provides a cat pool equipment identification method, a cat pool equipment identification device, cat pool equipment identification equipment and a storage medium, so that cat pool equipment can be quickly and accurately identified.
In a first aspect, an embodiment of the present invention provides a cat pool device identification method, where the method includes:
acquiring and recording equipment behaviors in a buried point mode to obtain buried point data;
determining first characteristic data according to the buried point data and the characteristics of the equipment, wherein the first characteristic data comprises the characteristic type of the core characteristics of the cat pool equipment;
and determining whether the target equipment is cat pool equipment or not according to the first characteristic data of the target equipment.
In a second aspect, an embodiment of the present invention further provides a cat pool equipment identification device, where the device includes:
the buried point data acquisition module is used for acquiring and recording equipment behaviors in a buried point mode to obtain buried point data;
the first characteristic data determining module is used for determining first characteristic data according to the buried point data and the characteristics of the equipment, wherein the first characteristic data comprises the characteristic type of the core characteristics of the cat pool equipment;
and the cat pool equipment judgment module is used for determining whether the target equipment is cat pool equipment or not according to the first characteristic data of the target equipment.
In a third aspect, an embodiment of the present invention further provides an electronic device, including:
at least one processor; and
a memory communicatively coupled to the at least one processor; wherein the content of the first and second substances,
the memory stores instructions executable by the at least one processor to enable the at least one processor to perform a cat pool device identification method according to any one of the embodiments of the present invention.
In a fourth aspect, the present invention further provides a computer-readable storage medium, on which a computer program is stored, where the computer program is executed by a processor to implement the cat pool device identification method according to any one of the embodiments of the present invention.
According to the embodiment of the invention, the behavior of equipment is collected and recorded in a point burying mode to obtain data of buried points; determining first characteristic data according to the buried point data and the characteristics of the equipment, wherein the first characteristic data comprises the characteristic type of the core characteristics of the equipment; and determining whether the target equipment is cat pool equipment or not according to the first characteristic data of the target equipment. The cat pool equipment can be quickly and accurately identified, and the black production behavior is restrained from occurring from the source.
Drawings
Fig. 1 is a flowchart of a cat pool device identification method according to a first embodiment of the present invention;
fig. 2 is a flowchart of a cat pool device identification method according to a second embodiment of the present invention;
fig. 3 is a schematic structural diagram of a cat pool equipment identification device in a third embodiment of the present invention;
fig. 4 is a schematic structural diagram of an electronic device in a fourth embodiment of the present invention.
Detailed Description
The embodiments of the present invention will be described in further detail with reference to the drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of and not restrictive on the broad invention. It should be further noted that, for convenience of description, only some structures, not all structures, relating to the embodiments of the present invention are shown in the drawings.
Example one
Fig. 1 is a flowchart of a cat pool device identification method according to an embodiment of the present invention, where this embodiment is applicable to a situation where black products of both cat pool devices are quickly identified, and the method may be executed by a cat pool device identification apparatus, where the apparatus may be implemented in a software and/or hardware manner and integrated into a device executing the method, and in this embodiment, the device executing the method may be a computer, a server, a tablet computer, or a smart phone. Specifically, referring to fig. 1, the method specifically includes the following steps:
and S110, acquiring and recording equipment behaviors in a buried point mode to obtain buried point data.
Specifically, in the embodiment of the present invention, the behavior of the device is recorded by embedding points in an Application program (App), and for example, if the point is embedded in a financial App, when a user performs a behavior such as registration, login, click, or processing a credit card, the behavior of the user can be recorded by embedding points, so as to obtain embedded data.
It should be noted that the device related in the embodiment of the present invention may be a smart device such as a smart phone, a personal computer, or a tablet computer, which can be installed and run an App.
And S120, determining first characteristic data according to the buried point data and the characteristics of the equipment, wherein the first characteristic data comprises the characteristic type of the core characteristics of the equipment.
Specifically, the device characteristics may include 122 characteristics such as a device code, a device type, an application version number, a geographic location characteristic, and a network configuration characteristic. Specifically, the first feature data may be determined according to the buried point data and the feature of the device, where the first feature data includes a feature type of a core feature of the device, and the first feature data may include, for example: the state characteristic of the device, the App state characteristic, the geographic position characteristic, the network configuration characteristic and other core characteristics of the device. It should be noted that, in the embodiment of the present invention, the feature type of the core feature of the device is named as the first feature data for convenience of description, and the embodiment of the present invention is not limited thereto.
Optionally, determining the first feature data according to the buried point data and the feature of the device may be performed by obtaining a record number corresponding to each device identifier in the buried point data, and if the record number of the target device is greater than a preset record number, determining the first feature data of the target device according to the buried point data of the target device and the feature of the device. The preset number of records may be 3, or may be other numbers customized by the user, which is not limited in the embodiment of the present invention.
For example, if the number of records of device behaviors such as registration, login, click, and processing of a credit card performed by the device a collected in a buried point manner is 100, the first feature data of the device a may be determined according to the buried point data of the device a, that is, the device behavior of the device a collected and recorded in a buried point manner and the feature of the device a. If the number of the acquired device records of the device B is only 1, subsequent processing on the device B is not needed, and whether the device B is a cat pool device is judged, because when the number of the device records is too small, it is difficult to judge the specific situation through the buried point data, therefore, in the embodiment of the invention, only when the number of the device records is larger than the preset number of the device records, whether the device B is a cat pool device is judged.
Optionally, after the first feature data is determined according to the buried point data and the features of the device, the feature data may be preprocessed according to the feature type included in the first feature data; the pretreatment comprises one or more of the following combinations: timestamp conversion, floating point type and character type conversion, or invalid data culling.
Specifically, the feature data may be preprocessed according to a feature type included in the first feature data. For example, all the first feature data may be screened, and if the first feature data includes invalid data, the invalid data may be filtered. In a specific example of the embodiment of the present invention, when any one of the data features in the first feature data contains (NULL, "NULL", "data") data, it is filtered.
For example, the timestamp conversion may be performed on the device creation time createtime feature in the first feature data, and specifically, the createtime may be converted into a timestamp through unix _ timestamp, which is convenient for subsequent calculation; the data in the first characteristic data may also be converted from a floating point type to a character type, for example, if the data type of some data in the first characteristic data is boolean data or character data, the data may be selectively converted into integer data. The advantage of setting up like this is that, convert the characteristic data in the first characteristic data into the data of being convenient for the computer to discern, can promote computational rate to improve cat pond equipment identification method's wholeness ability.
In another specific example of the embodiment of the present invention, the geographic position feature in the first feature data is processed, five decimal places of the geographic position feature are reserved, and data after the sixth decimal place is deleted. The reason for this is thatDegree of movement of 10-5Degree, actual moving distance 1.1m, latitude per moving 10-5The actual moving distance is about 0.6-0.75 m. That is, if the latitude and longitude of the device varies below four decimal places, it is considered that the moving distance of the device does not exceed
The feature of the cat pool device is that the geographical position of the target device can be accurately determined by keeping the five decimal places of the geographical position feature in the first feature data, and the calculation amount can be greatly reduced by filtering the sixth decimal place and the data after the sixth decimal place, and the identification result of the cat pool device cannot be reduced.
S130, determining whether the target equipment is cat pool equipment or not according to the first characteristic data of the target equipment.
Specifically, after the first characteristic data is determined according to the embedded point data and the characteristics of the device, whether the target device is a cat pool device or not can be determined according to the first characteristic data of the target device, wherein the target device can be any one of devices which collect and record device behaviors in an embedded point mode. For example, the device behavior of 1000 mobile phone devices is collected and recorded in a buried point manner, and the target device may be any one of the 1000 mobile phone devices.
Optionally, before determining whether the target device is a cat pool device according to the first feature data of the target device, a deletion rate of the target feature data in the first feature data may also be obtained, if the deletion rate is smaller than a preset deletion rate threshold, the target feature data is retained, otherwise, the target feature data is screened out. The target feature data may be any one of the first feature data.
For example, the preset deficiency rate threshold may be 50%, that is, if the deficiency rate of the device current state of charge feature in the first feature data obtained from the target device is 80%, the device current state feature may be subjected to a screening process; and if the missing rate of the geographic position features in the first feature data of the target device is 20%, reserving the geographic position features in the first feature data.
It should be noted that, in the embodiment of the present invention, the first feature data of the target device is subjected to the screening processing according to the method, and if the target device is a cat pool device, the remaining data features are subjected to long-tail distribution except that the Location Based Services (LBS) longitude length determination and the LBS latitude determination of the client obey the discrete distribution.
Specifically, after a series of pre-processing is performed on the first characteristic data of the target device, whether the target device is a cat pool device may be determined according to the processed first characteristic data.
Optionally, determining whether the target device is a cat pool device according to the first feature data of the target device may include: and respectively calculating the variances of the longitude, the latitude, the positioning accuracy and the criterion in the first characteristic data of the target device, and if the calculated variances of the longitude, the latitude and the certainty are 0 or less than a set threshold value and the variance of the criterion is not equal to 0, determining that the target device is the cat pool device.
Specifically, the variances of the longterm, the latiude, and the accuracy of the target device may be respectively calculated, and when the variance of the longterm, the latiude, and the accuracy is equal to 0 or less than a set threshold, the set threshold may be 10-8(ii) a Calculating the variance of the createtime, and if the timestamp variance corresponding to the createtime is not equal to 0, indicating that the operation of the target device at a plurality of time nodes corresponds to the same position, so that the target device is a cat pool device; otherwise, the target device is not a cat pool device.
Optionally, in another specific example of the embodiment of the present invention, a plurality of target devices whose record number is greater than a preset number may be respectively obtained, and first feature data of the plurality of target devices may be obtained; preprocessing the acquired first characteristic data of the target devices, then respectively calculating the variance of the longitudinal, latitude and accuracy characteristic data of the target devices, and if the variance is equal to 0 or less than 10-8Then respectively calculating a plurality ofAnd if the variance of the createtime of the target device is not equal to 0, further determining a plurality of cat pool devices.
According to the scheme of the embodiment, the behavior of the equipment is collected and recorded in a point burying mode to obtain data of buried points; determining first characteristic data according to the buried point data and the characteristics of the equipment, wherein the first characteristic data comprises the characteristic type of the core characteristics of the equipment; and determining whether the target equipment is cat pool equipment or not according to the first characteristic data of the target equipment. The cat pool equipment can be quickly and accurately identified, and the black production behavior is restrained from occurring from the source.
Example two
Fig. 2 is a flowchart of a cat pool device identification method in the second embodiment of the present invention, and this implementation details the above embodiment, and specifically, after determining that the target device is a cat pool device, the implementation may further include: the method comprises the steps of collecting the physical Address (Mac) Address of the routing device connected with the target device, determining the Mac addresses of the routing devices connected with the devices, and if the Mac addresses of the routing devices connected with the devices are the same as the Mac Address of the routing device connected with the target device, enabling the devices to be cat pool devices. Specifically, referring to fig. 2, the method specifically includes the following steps:
and S210, acquiring and recording equipment behaviors in a buried point mode to obtain buried point data.
S220, determining first feature data according to the buried point data and the features of the equipment, wherein the first feature data comprises feature types of core features of the equipment.
And S230, determining whether the target equipment is cat pool equipment or not according to the first characteristic data of the target equipment.
S240, collecting Mac addresses of the routing devices connected with the target device, determining Mac addresses of the routing devices connected with other devices, and if the Mac addresses of the routing devices connected with the devices are the same as the Mac address of the routing device connected with the target device, enabling the devices to be cat pool devices.
Specifically, after the target device is determined to be the cat pool device, the Mac addresses of the routing device or other network devices connected to the target device may be acquired, and the Mac addresses of the routing device or other network devices connected to other devices may be acquired, where if the Mac addresses of a certain device and the routing device or other network devices connected to the target device are the same, the device is also the cat pool device.
For example, if it is determined that device a is a cat pool device, and the collecting device a is connected to a Wireless Fidelity (WiFi) with a Mac address of "xx", and it is found that device B is also connected to a WiFi with a Mac address of "xx", device B may be determined as a cat pool device, where IP addresses of device a and device B are not exactly the same, but there are similar situations, for example, the first three fields or the first five fields of the IP addresses of device a and device B are the same.
In another specific example of the embodiment of the present invention, by counting WiFi connection frequencies of target devices (it should be noted that the target devices are devices determined as cat pool devices), and excluding WiFi that cannot be used as a reference, such as "TP-LINK", then collecting Mac addresses of WiFi connected to the target devices, and determining Mac addresses of WiFi connected to other devices, if the Mac address of the WiFi connected to a certain device is the same as the Mac address of the WiFi connected to the target device, the device is a cat pool device.
Optionally, whether the target device is a cat pool device is determined according to the first feature data of the target device, and more cat pool devices may be further determined by reducing the limitation requirement of the battery power data feature in the first feature data of the device. For example, if the data characteristic of the battery level in the first characteristic data of the device requires a battery level greater than 90%. That is, when the battery capacity of the device is greater than 90%, the device is determined as a cat pool device under the condition that the setting requirements of other characteristics are met, so that the phenomenon that the cat pool device is determined as a non-cat pool device may occur. Therefore, in this embodiment, the battery power data characteristic in the first characteristic data of the device is relaxed, and even if the device is not powered, it can be determined as a cat pool device.
In the solution of this embodiment, on the basis of the above embodiment, by acquiring the Mac addresses of the routing devices connected to the target device and determining the Mac addresses of the routing devices connected to the multiple devices, if the Mac addresses of the routing devices connected to the multiple devices are the same as the Mac address of the routing device connected to the target device, the multiple devices are the cat pool devices. Further more cat pool equipment is determined, the cat pool equipment can be quickly and accurately identified, and the black birth behavior is restrained from the source.
EXAMPLE III
Fig. 3 is a schematic structural diagram of a cat pool device identification apparatus in a third embodiment of the present invention, where the apparatus may perform the cat pool device identification method related in any embodiment of the present invention, and the apparatus may be implemented by software and/or hardware, and specifically, the apparatus includes: a buried point data obtaining module 310, a first characteristic data determining module 320 and a cat pool device judging module 330.
The buried point data acquisition module 310 is configured to acquire and record device behaviors in a buried point manner to obtain buried point data;
a first feature data determining module 320, configured to determine first feature data according to the buried point data and the feature of the device, where the first feature data includes a feature type of a core feature of the device;
the cat pool device determining module 330 is configured to determine whether the target device is a cat pool device according to the first feature data of the target device.
According to the scheme of the embodiment, the device behavior is collected and recorded in a buried point mode through the buried point data acquisition module to obtain buried point data; determining first characteristic data according to the buried point data and the characteristics of the equipment through a cat pool equipment judgment module; and determining whether the target equipment is the cat pool equipment or not by the cat pool equipment judgment module according to the first characteristic data of the target equipment. The cat pool equipment can be quickly and accurately identified, and the black production behavior is restrained from occurring from the source.
Optionally, the first feature data determining module 320 may be further specifically configured to obtain a record number corresponding to each device identifier in the buried point data;
and if the record number of the target equipment is greater than the preset record number, determining first characteristic data of the target equipment according to the buried point data of the target equipment and the characteristics of the equipment.
Optionally, the cat pool device identification apparatus further includes: the characteristic data preprocessing unit is used for preprocessing the characteristic data according to the characteristic type included in the first characteristic data; the pretreatment comprises one or more of the following combinations: timestamp conversion, floating point type and character type conversion, or invalid data culling.
Optionally, the cat pool device identification apparatus further includes: the missing rate acquiring unit is used for acquiring the missing rate of the target characteristic data in the first characteristic data; and if the deficiency rate is less than the preset deficiency rate threshold value, the target characteristic data is reserved.
Optionally, the cat pool device determining module 330 further includes a variance calculating unit, configured to calculate variances of the client LBS longitude and latitude, the client LBS latitude and longitude, the positioning accuracy and the creation time criterion in the first feature data of the target device, respectively, and if the calculated variances of the longitude, the longitude and the latitude and the certainty are 0 or smaller than a set threshold, and the variance of the criterion is not equal to 0, determine that the target device is the cat pool device.
Optionally, the cat pool device determining module 330 may further include: and the Mac address acquisition unit is used for acquiring Mac addresses of the routing equipment connected with the target equipment, determining the Mac addresses of the routing equipment connected with the multiple equipment, and if the Mac addresses of the routing equipment connected with the multiple equipment are the same as the Mac addresses of the routing equipment connected with the target equipment, determining the multiple equipment to be cat pool equipment.
Optionally, the cat pool device determining module 330 may further include: and the limitation requirement reducing unit is used for reducing the limitation requirement of the battery power data in the first characteristic data of the equipment and expanding the number of the cat pool equipment.
The cat pool equipment identification device provided by the embodiment of the invention can execute the cat pool equipment identification method provided by any embodiment of the invention, and has the corresponding functional modules and beneficial effects of the execution method.
Example four
The fourth embodiment of the application provides an electronic device and a readable storage medium. Fig. 4 is a block diagram of an electronic device for implementing a cat pool device identification method according to an embodiment of the present application, and as shown in fig. 4, the block diagram of the electronic device for implementing a cat pool device identification method according to any embodiment of the present application is shown. Electronic devices are intended to represent various forms of digital computers, such as laptops, desktops, workstations, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices, and other similar computing devices. The components shown herein, their connections and relationships, and their functions, are meant to be examples only, and are not meant to limit implementations of the present application that are described and/or claimed herein.
As shown in fig. 4, the electronic apparatus includes: one or more processors 401, memory 402, and interfaces for connecting the various components, including high-speed interfaces and low-speed interfaces. The various components are interconnected using different buses and may be mounted on a common motherboard or in other manners as desired. The processor may process instructions for execution within the electronic device, including instructions stored in or on the memory to display graphical information of a GUI on an external input/output apparatus (such as a display device coupled to the interface). In other embodiments, multiple processors and/or multiple buses may be used, along with multiple memories and multiple memories, as desired. Also, multiple electronic devices may be connected, with each device providing portions of the necessary operations (e.g., as a server array, a group of blade servers, or a multi-processor system). In fig. 4, one processor 401 is taken as an example.
The memory 402, which is a non-transitory computer readable storage medium, may be used to store non-transitory software programs, non-transitory computer executable programs, and modules, such as program modules corresponding to the cat pool device identification method of the present application (e.g., the buried point data acquisition module 310, the first feature data determination module 320, and the cat pool device determination module 330 shown in fig. 3). The processor 401 executes various functional applications of the server and data processing, i.e., the method for cat pool device identification in the above-described method embodiments, by executing non-transitory software programs, instructions, and modules stored in the memory 402.
Namely: acquiring and recording equipment behaviors in a buried point mode to obtain buried point data;
determining first characteristic data according to the buried point data and the characteristics of the equipment, wherein the first characteristic data comprises the characteristic type of the core characteristics of the equipment;
and determining whether the target equipment is cat pool equipment or not according to the first characteristic data of the target equipment.
The memory 402 may include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application program required for at least one function; the storage data area may store data created from use of the electronic device identified by the cat pool device, and the like. Further, the memory 402 may include high speed random access memory, and may also include non-transitory memory, such as at least one magnetic disk storage device, flash memory device, or other non-transitory solid state storage device. In some embodiments, the memory 402 optionally includes memory located remotely from the processor 401, and these remote memories may be connected over a network to the cat pool device-identified electronic device. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.
The electronic device of the method for cat pool device identification may further include: an input device 403 and an output device 404. The processor 401, the memory 402, the input device 403 and the output device 404 may be connected by a bus or other means, and fig. 4 illustrates an example of a connection by a bus.
The input device 403 may receive entered numeric or character information and generate key signal inputs related to user settings and function controls of the electronic device identified by the cat pool device, such as a touch screen, keypad, mouse, track pad, touch pad, pointer stick, one or more mouse buttons, track ball, joystick, or other input device. The output devices 404 may include a display device, auxiliary lighting devices (e.g., LEDs), and tactile feedback devices (e.g., vibrating motors), among others. The display device may include, but is not limited to, a Liquid Crystal Display (LCD), a Light Emitting Diode (LED) display, and a plasma display. In some implementations, the display device can be a touch screen.
Various implementations of the systems and techniques described here can be realized in digital electronic circuitry, integrated circuitry, application specific ASICs (application specific integrated circuits), computer hardware, firmware, software, and/or combinations thereof. These various embodiments may include: implemented in one or more computer programs that are executable and/or interpretable on a programmable system including at least one programmable processor, which may be special or general purpose, receiving data and instructions from, and transmitting data and instructions to, a storage system, at least one input device, and at least one output device.
These computer programs (also known as programs, software applications, or code) include machine instructions for a programmable processor, and may be implemented using high-level procedural and/or object-oriented programming languages, and/or assembly/machine languages. As used herein, the terms "machine-readable medium" and "computer-readable medium" refer to any computer program product, apparatus, and/or device (e.g., magnetic discs, optical disks, memory, Programmable Logic Devices (PLDs)) used to provide machine instructions and/or data to a programmable processor, including a machine-readable medium that receives machine instructions as a machine-readable signal. The term "machine-readable signal" refers to any signal used to provide machine instructions and/or data to a programmable processor.
To provide for interaction with a user, the systems and techniques described here can be implemented on a computer having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to a user; and a keyboard and a pointing device (e.g., a mouse or a trackball) by which a user can provide input to the computer. Other kinds of devices may also be used to provide for interaction with a user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form, including acoustic, speech, or tactile input.
The systems and techniques described here can be implemented in a computing system that includes a back-end component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front-end component (e.g., a user computer having a graphical user interface or a web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such back-end, middleware, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local Area Networks (LANs), Wide Area Networks (WANs), and the Internet.
The computer system may include clients and servers. A client and server are generally remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other.
According to the technical scheme of the embodiment of the application, the cat pool equipment can be rapidly and accurately identified, and the black birth behavior can be restrained from the source.
It should be understood that various forms of the flows shown above may be used, with steps reordered, added, or deleted. For example, the steps described in the present application may be executed in parallel, sequentially, or in different orders, and the present invention is not limited thereto as long as the desired results of the technical solutions disclosed in the present application can be achieved.
The above-described embodiments should not be construed as limiting the scope of the present application. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may be made in accordance with design requirements and other factors. Any modification, equivalent replacement, and improvement made within the spirit and principle of the present application shall be included in the protection scope of the present application.
Claims (8)
1. A cat pool equipment identification method, comprising:
acquiring and recording equipment behaviors in a buried point mode to obtain buried point data;
determining first feature data according to the buried point data and the features of the equipment, wherein the first feature data comprises feature types of core features of the equipment;
determining whether the target equipment is cat pool equipment or not according to first characteristic data of the target equipment;
the determining whether the target device is a cat pool device according to the first characteristic data of the target device includes:
respectively calculating variances of location-based service LBS longitude, client LBS latitude, positioning accuracy and creation time in first characteristic data of target equipment, and if the calculated variances of the longitude, the latitude and the access are 0 or less than a set threshold value and the variance of the creation time is not equal to 0, determining that the target equipment is cat pool equipment;
after determining that the target device is a cat pool device, the method includes:
and acquiring the physical address Mac address of the routing equipment connected with the target equipment, determining the Mac addresses of the routing equipment connected with the plurality of equipment, and if the Mac addresses of the routing equipment connected with the plurality of equipment are the same as the Mac address of the routing equipment connected with the target equipment, determining that the plurality of equipment are cat pool equipment.
2. The method of claim 1, wherein determining first characteristic data from the landfill data and the characteristics of the equipment comprises:
acquiring the number of records corresponding to each equipment identifier in the buried point data;
and if the record number of the target equipment is greater than the preset record number, determining first characteristic data of the target equipment according to the buried point data of the target equipment and the characteristics of the equipment.
3. The method of claim 1, after determining first characteristic data based on the landfill data and the characteristics of the equipment, further comprising:
preprocessing the characteristic data according to the characteristic type included in the first characteristic data; the pretreatment comprises one or more of the following combinations: timestamp conversion, floating point type and character type conversion, or invalid data culling.
4. The method of claim 1, further comprising, prior to determining whether the target device is a cat pool device based on the first characteristic data of the target device:
acquiring the missing rate of target characteristic data in the first characteristic data;
and if the deficiency rate is less than the preset deficiency rate threshold value, the target characteristic data is reserved.
5. The method of claim 1, wherein determining whether the target device is a cat pool device based on the first characteristic data of the target device further comprises:
and reducing the limitation requirement of battery power data in the first characteristic data of the equipment, and expanding the number of the cat pool equipment.
6. A cat pool equipment identification device, comprising:
the buried point data acquisition module is used for acquiring and recording equipment behaviors in a buried point mode to obtain buried point data;
the first characteristic data determining module is used for determining first characteristic data according to the buried point data and the characteristics of the equipment, and the first characteristic data comprises the characteristic type of the core characteristics of the equipment;
the cat pool equipment judgment module is used for determining whether the target equipment is cat pool equipment or not according to the first characteristic data of the target equipment;
the cat pool equipment judgment module further comprises a variance calculation unit;
the system comprises a first characteristic data acquisition unit, a second characteristic data acquisition unit and a third characteristic data acquisition unit, wherein the first characteristic data acquisition unit is used for respectively calculating the variance of location-based service LBS longitude and latitude, client LBS latitude and longitude, positioning accuracy and creation time of a client in the first characteristic data of a target device, and if the calculated variance of the longitude, the longitude and the latitude is 0 or less than a set threshold value and the variance of the creation time is not equal to 0, the target device is determined to be a cat pool device;
the cat pool equipment judgment module may further include: a Mac address acquisition unit;
the device comprises a plurality of devices and is used for acquiring Mac addresses of routing devices connected with target devices, determining the Mac addresses of the routing devices connected with the devices, and if the Mac addresses of the routing devices connected with the devices are the same as the Mac addresses of the routing devices connected with the target devices, enabling the devices to be cat pool devices.
7. An electronic device, comprising:
at least one processor; and
a memory communicatively coupled to the at least one processor; wherein the content of the first and second substances,
the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the cat pool device identification method of any one of claims 1-5.
8. A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out a cat pool device identification method according to any one of claims 1 to 5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911176112.1A CN110995687B (en) | 2019-11-26 | 2019-11-26 | Cat pool equipment identification method, device, equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911176112.1A CN110995687B (en) | 2019-11-26 | 2019-11-26 | Cat pool equipment identification method, device, equipment and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN110995687A CN110995687A (en) | 2020-04-10 |
| CN110995687B true CN110995687B (en) | 2022-06-07 |
Family
ID=70087237
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911176112.1A Active CN110995687B (en) | 2019-11-26 | 2019-11-26 | Cat pool equipment identification method, device, equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110995687B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112615966B (en) * | 2020-12-14 | 2023-04-14 | 南方电网海南数字电网研究院有限公司 | Cat pool terminal identification method |
| CN112926045B (en) * | 2021-02-24 | 2023-12-26 | 北京通付盾人工智能技术有限公司 | Group control equipment identification method based on logistic regression model |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107248082A (en) * | 2017-05-23 | 2017-10-13 | 北京道隆华尔软件股份有限公司 | Support card identification method and device |
| CN108712426A (en) * | 2018-05-21 | 2018-10-26 | 携程旅游网络技术（上海）有限公司 | Reptile recognition methods and system a little are buried based on user behavior |
| CN108874641A (en) * | 2018-06-01 | 2018-11-23 | 平安科技（深圳）有限公司 | A kind of analysis method that burying point data and device |
| CN109522190A (en) * | 2018-10-12 | 2019-03-26 | 中国平安人寿保险股份有限公司 | Abnormal user Activity recognition method and device, electronic equipment, storage medium |
| CN109636433A (en) * | 2018-10-16 | 2019-04-16 | 深圳壹账通智能科技有限公司 | Feeding card identification method, device, equipment and storage medium based on big data analysis |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102647508B (en) * | 2011-12-15 | 2016-12-07 | 中兴通讯股份有限公司 | A kind of mobile terminal and method for identifying ID |
-
2019
- 2019-11-26 CN CN201911176112.1A patent/CN110995687B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107248082A (en) * | 2017-05-23 | 2017-10-13 | 北京道隆华尔软件股份有限公司 | Support card identification method and device |
| CN108712426A (en) * | 2018-05-21 | 2018-10-26 | 携程旅游网络技术（上海）有限公司 | Reptile recognition methods and system a little are buried based on user behavior |
| CN108874641A (en) * | 2018-06-01 | 2018-11-23 | 平安科技（深圳）有限公司 | A kind of analysis method that burying point data and device |
| CN109522190A (en) * | 2018-10-12 | 2019-03-26 | 中国平安人寿保险股份有限公司 | Abnormal user Activity recognition method and device, electronic equipment, storage medium |
| CN109636433A (en) * | 2018-10-16 | 2019-04-16 | 深圳壹账通智能科技有限公司 | Feeding card identification method, device, equipment and storage medium based on big data analysis |
Also Published As
| Publication number | Publication date |
|---|---|
| CN110995687A (en) | 2020-04-10 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107809331B (en) | Method and device for identifying abnormal flow | |
| US20210035126A1 (en) | Data processing method, system and computer device based on electronic payment behaviors | |
| CN110570217B (en) | Cheating detection method and device | |
| CN110519263B (en) | Anti-swipe method, device, apparatus, and computer-readable storage medium | |
| CN110995687B (en) | Cat pool equipment identification method, device, equipment and storage medium | |
| CN110852780A (en) | Data analysis method, device, equipment and computer storage medium | |
| CN112948614A (en) | Image processing method, image processing device, electronic equipment and storage medium | |
| CN111966925B (en) | Building interest point weight judging method and device, electronic equipment and storage medium | |
| CN113765873A (en) | Method and apparatus for detecting abnormal access traffic | |
| CN111860644A (en) | Abnormal account identification method, device, equipment and storage medium | |
| CN110599278B (en) | Method, apparatus, and computer storage medium for aggregating device identifiers | |
| CN110796191A (en) | Trajectory classification method and device | |
| CN110477866B (en) | Method and device for detecting sleep quality, electronic equipment and storage medium | |
| CN111241225A (en) | Resident area change judgment method, resident area change judgment device, resident area change judgment equipment and storage medium | |
| CN111726402B (en) | User behavior data processing method and device, electronic equipment and storage medium | |
| CN111753960B (en) | Model training and image processing method and device, electronic equipment and storage medium | |
| CN111553283B (en) | Method and device for generating model | |
| CN111966767A (en) | Track thermodynamic diagram generation method and device, electronic equipment and storage medium | |
| CN113344064A (en) | Event processing method and device | |
| CN113595886A (en) | Instant messaging message processing method and device, electronic equipment and storage medium | |
| CN112507249A (en) | Method and device for generating interest points, electronic equipment and storage medium | |
| CN112541934A (en) | Image processing method and device | |
| CN112437152B (en) | Crash processing method and device, electronic equipment and storage medium | |
| CN113590447B (en) | Buried point processing method and device | |
| CN113360688A (en) | Information base construction method, device and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information | ||
| CB02 | Change of applicant information |
Address after: 518000 Room 201, building A, No. 1, Qian Wan Road, Qianhai Shenzhen Hong Kong cooperation zone, Shenzhen, Guangdong (Shenzhen Qianhai business secretary Co., Ltd.) Applicant after: Shenzhen Mingshu Information Co.,Ltd. Address before: 518000 Room 201, building A, No. 1, Qian Wan Road, Qianhai Shenzhen Hong Kong cooperation zone, Shenzhen, Guangdong (Shenzhen Qianhai business secretary Co., Ltd.) Applicant before: Shenzhen Suishou Jinfu Information Technology Co.,Ltd. |
|
| GR01 | Patent grant | ||
| GR01 | Patent grant |