SG11201904533UA - Method, apparatus and system for detecting abnormal behavior of user - Google Patents

Method, apparatus and system for detecting abnormal behavior of user

Info

Publication number
SG11201904533UA
SG11201904533UA SG11201904533UA SG11201904533UA SG11201904533UA SG 11201904533U A SG11201904533U A SG 11201904533UA SG 11201904533U A SG11201904533U A SG 11201904533UA SG 11201904533U A SG11201904533U A SG 11201904533UA SG 11201904533U A SG11201904533U A SG 11201904533UA
Authority
SG
Singapore
Prior art keywords
user
time series
series data
network behavior
abnormal behavior
Prior art date
Application number
SG11201904533UA
Inventor
Wenpeng Song
Xiong Shen
Original Assignee
Zhongan Information Technology Service Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Zhongan Information Technology Service Co Ltd filed Critical Zhongan Information Technology Service Co Ltd
Publication of SG11201904533UA publication Critical patent/SG11201904533UA/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/22—Indexing; Data structures therefor; Storage structures
    • G06F16/2228—Indexing structures
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/24—Querying
    • G06F16/245—Query processing
    • G06F16/2458—Special types of queries, e.g. statistical queries, fuzzy queries or distributed queries
    • G06F16/2474—Sequence data queries, e.g. querying versioned data
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/018—Certifying business or products
    • G06Q30/0185—Product, service or business identity fraud
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/02—Marketing; Price estimation or determination; Fundraising
    • G06Q30/0201—Market modelling; Market analysis; Collecting market data
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/06—Buying, selling or leasing transactions
    • G06Q30/0601—Electronic shopping [e-shopping]
    • G06Q30/0623—Item investigation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425—Traffic logging, e.g. anomaly detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/02—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/535—Tracking the activity of the user

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Finance (AREA)
  • Accounting & Taxation (AREA)
  • Theoretical Computer Science (AREA)
  • Strategic Management (AREA)
  • Development Economics (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • Economics (AREA)
  • Marketing (AREA)
  • Entrepreneurship & Innovation (AREA)
  • Data Mining & Analysis (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Databases & Information Systems (AREA)
  • Game Theory and Decision Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computing Systems (AREA)
  • Computer Hardware Design (AREA)
  • Computational Linguistics (AREA)
  • Probability & Statistics with Applications (AREA)
  • Mathematical Physics (AREA)
  • Fuzzy Systems (AREA)
  • Debugging And Monitoring (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Computer And Data Communications (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

Disclosed are a method, device and system for detecting an abnormal behavior of a user, which belong to the field of computers. The method comprises: acquiring time series data, wherein the time series data is used for describing at least one network behavior; and when the acquired time series data is not stationary, confirming that a user corresponding to the at least one network behavior is behaving abnormally. Since time series data more accurately describes a network behavior of a user, by confirming, when the time series data is not stationary, that the user behaves abnormally, the accuracy rate is relatively high, thereby improving the experience of the user when surfing the Internet. In addition, compared with other methods, the method for determining, by means of the stationarity of time series data, whether a user behaves abnormally is not only highly accurate, but also high efficient.
SG11201904533UA 2017-07-06 2018-07-02 Method, apparatus and system for detecting abnormal behavior of user SG11201904533UA (en)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
CN201710547742 2017-07-06
CN201710577019.6A CN107481090A (en) 2017-07-06 2017-07-14 A kind of user's anomaly detection method, device and system
PCT/CN2018/094065 WO2019007306A1 (en) 2017-07-06 2018-07-02 Method, device and system for detecting abnormal behavior of user

Publications (1)

Publication Number Publication Date
SG11201904533UA true SG11201904533UA (en) 2019-08-27

Family

ID=60595704

Family Applications (1)

Application Number Title Priority Date Filing Date
SG11201904533UA SG11201904533UA (en) 2017-07-06 2018-07-02 Method, apparatus and system for detecting abnormal behavior of user

Country Status (7)

Country Link
US (1) US20190238581A1 (en)
JP (1) JP6841910B2 (en)
KR (1) KR20190084946A (en)
CN (1) CN107481090A (en)
HK (1) HK1247699A1 (en)
SG (1) SG11201904533UA (en)
WO (1) WO2019007306A1 (en)

Families Citing this family (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107481090A (en) * 2017-07-06 2017-12-15 众安信息技术服务有限公司 A kind of user's anomaly detection method, device and system
CN109302377B (en) * 2018-06-13 2021-01-15 百度在线网络技术（北京）有限公司 Application function implementation method, device, equipment and storage medium
CN109818942B (en) * 2019-01-07 2021-08-24 微梦创科网络科技（中国）有限公司 User account abnormity detection method and device based on time sequence characteristics
CN110675228B (en) * 2019-09-27 2021-05-28 支付宝(杭州)信息技术有限公司 User ticket buying behavior detection method and device
EP4193285A1 (en) * 2020-08-07 2023-06-14 Kount Inc. Techniques for efficient network security for a web server using anomaly detection
CN112017005A (en) * 2020-08-30 2020-12-01 北京嘀嘀无限科技发展有限公司 Service maintenance method, device, server and storage medium
CN112686494B (en) * 2020-11-25 2024-03-22 国网江苏省电力有限公司营销服务中心 Data fitting method and device based on line loss abnormal area and intelligent equipment
CN112738545A (en) * 2020-12-28 2021-04-30 北京蜜莱坞网络科技有限公司 Live broadcast room sharing detection method and device, electronic equipment and storage medium
CN112733015B (en) * 2020-12-30 2024-06-14 绿盟科技集团股份有限公司 User behavior analysis method, device, equipment and medium
CN112966732B (en) * 2021-03-02 2022-11-18 东华大学 Multi-factor interactive behavior anomaly detection method with periodic attribute
JP2022136708A (en) * 2021-03-08 2022-09-21 富士通株式会社 Information processing method and information processing program
CN113051311B (en) * 2021-03-16 2023-07-28 鱼快创领智能科技(南京)有限公司 Method, system and device for monitoring abnormal change of liquid level of vehicle oil tank
CN113722199B (en) * 2021-09-07 2024-01-30 上海观安信息技术股份有限公司 Abnormal behavior detection method, device, computer equipment and storage medium
CN114020996A (en) * 2021-09-26 2022-02-08 武汉斗鱼网络科技有限公司 Method, device, medium and computer equipment for identifying abnormal watching user
CN114221805A (en) * 2021-12-13 2022-03-22 恒安嘉新（北京）科技股份公司 Method, device, equipment and medium for monitoring industrial internet data
US11593816B1 (en) * 2022-06-23 2023-02-28 Morgan Stanley Services Group Inc. Integrating fraud telemetry vendor
CN115208938B (en) * 2022-07-06 2023-08-01 中移互联网有限公司 User behavior control method and device and computer readable storage medium
CN115414033B (en) * 2022-11-03 2023-02-24 京东方艺云(杭州)科技有限公司 Method and device for determining abnormal eye using behavior of user
CN116936097B (en) * 2023-07-24 2024-07-05 云南白药集团无锡药业有限公司 Training lamp user eye abnormal movement intelligent detection method

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101753381B (en) * 2009-12-25 2012-10-10 华中科技大学 Method for detecting network attack behaviors
US20150235152A1 (en) * 2014-02-18 2015-08-20 Palo Alto Research Center Incorporated System and method for modeling behavior change and consistency to detect malicious insiders
JP6410130B2 (en) * 2014-05-15 2018-10-24 株式会社Ｊｓｏｌ Crop yield prediction device, crop prediction system, and crop prediction method
JP6416570B2 (en) * 2014-09-24 2018-10-31 富士フイルム株式会社 Medical support device, operating method and program for medical support device, and medical support system
CN104486298B (en) * 2014-11-27 2018-03-09 小米科技有限责任公司 Identify the method and device of user behavior
CN105187383A (en) * 2015-08-06 2015-12-23 电子科技大学 Abnormal behaviour detection method based on communication network
US9838409B2 (en) * 2015-10-08 2017-12-05 Cisco Technology, Inc. Cold start mechanism to prevent compromise of automatic anomaly detection systems
CN106228178A (en) * 2016-07-06 2016-12-14 吴本刚 Networks congestion control prognoses system
CN107481090A (en) * 2017-07-06 2017-12-15 众安信息技术服务有限公司 A kind of user's anomaly detection method, device and system

Also Published As

Publication number Publication date
WO2019007306A1 (en) 2019-01-10
US20190238581A1 (en) 2019-08-01
JP2019537115A (en) 2019-12-19
JP6841910B2 (en) 2021-03-10
CN107481090A (en) 2017-12-15
KR20190084946A (en) 2019-07-17
HK1247699A1 (en) 2018-09-28

Similar Documents

Publication Publication Date Title
SG11201904533UA (en) Method, apparatus and system for detecting abnormal behavior of user
MY196931A (en) Face location tracking method, apparatus, and electronic device
PH12020550684A1 (en) Blockchain-Based Transaction Processing Method And Apparatus
SG11201803902VA (en) Data processing method and apparatus
MX2015016774A (en) Method and apparatus for testing network channel status, and electronic device.
MY177409A (en) Method and system for verifying an account operation
MX350670B (en) Method and device for recognizing user behavior.
MY182121A (en) Electronic payment service processing method and device, and electronic payment method and device
SG11201804033RA (en) Information recommendation method and apparatus
SG10201907254XA (en) Text address processing method and apparatus
MY178898A (en) User profiling system and method therefor
MY193268A (en) App processing method and apparatus
MY193270A (en) Method, system, and device for process triggering
MX2018015855A (en) Using a mobile phone for monitoring a medical device.
EP4336493A3 (en) Method and apparatus for packet loss concealment, and decoding method and apparatus employing same
MX2019000748A (en) Method for determining a maximum allowable volume of water that can be removed over time from an underground water source.
MX2015006652A (en) Communication message recognition method and device.
MX2016009372A (en) Methods, network node and wireless device for managing operational behavior of wireless device after measurement gap.
IN2015CH03249A (en)
MX2021008923A (en) Apparatus, system and method of determining one or more parameters of a refractive error of a tested eye.
PH12019501176B1 (en) Wireless network type detection method and apparatus, and electronic device
MX357642B (en) Information selection method and device.
PH12016500020B1 (en) Apparatus and method for providing connections to contacts based on associations with content
MY189696A (en) Weather data processing apparatus and method using weather radar
FR3057724B1 (en) METHOD FOR GENERATING A MULTI-CARRIER SIGNAL, DEVICE AND CORRESPONDING COMPUTER PROGRAM