325results about How to "Easy to analyze" patented technology

The invention discloses an underground engineering structure total space deformation analysis method based on a multi-depth camera array, and relates to the field of space deformation, and the method comprises the steps: employing the multi-depth camera array to collect a depth image and a color image of an underground engineering structure, and generating an alignment depth image of each depth camera; performing internal reference calibration on the depth camera, and converting an aligned depth image of the depth camera into three-dimensional color point cloud data of the depth camera; performing external parameter calibration on each depth camera to obtain an optimized transformation matrix from each slave camera to the master camera; transforming the three-dimensional color point cloud data of each subordinate camera to a coordinate system of the main camera by adopting an optimized transformation matrix to obtain a three-dimensional model of the underground engineering structure; and determining corresponding point pairs in the three-dimensional model obtained in different periods, and calculating the Euclidean distance between the corresponding point pairs to realize the full-space deformation analysis of the underground engineering structure. According to the invention, low-cost and high-precision underground engineering deformation monitoring is realized.

The invention discloses a blue-green algae identification and quantification method and device based on unmanned aerial vehicle remote sensing images and deep learning and a medium, and relates to the technical field of information data processing. Combining meteorological data and water quality monitoring data to construct an adaptive dynamic environment algorithm to extract EXIF metadata including camera parameters and attitude angle information, and establishing a geometric projection model to perform coarse orthographic correction on an original aerial image; the method comprises the following steps: extracting a multi-scale cyanobacterial bloom image feature map by stages based on a ResNet architecture and in combination with a feature pyramid network FPN fused with an attention mechanism, and obtaining an instance mask of cyanobacterial bloom through an anchor-free region proposal network, ROI Align and a head network; based on an improved GIS space projection and deep learning algorithm, carrying out high-precision area measurement and calculation on a binary mask image converted from the instance mask; according to the method, the influence of irrelevant interference on blue-green algae identification can be reduced, and the accuracy and comparability of blue-green algae identification and area calculation are improved.

The invention discloses a Linux-oriented vulnerability repair verification method and system and a medium. The method comprises the steps of creating a test application form for a CVE vulnerability patch in a task management system, preparing a test environment for CVE vulnerability repair verification as well as a required test table, a software source and a test strategy file, and calling a tool interface to automatically trigger an assembly line; the assembly line executes the test suite in the test environment based on the test table, the software source and the test strategy file and collects an execution state, and if the execution state is failure, automatic retry can be carried out on the CVE vulnerability based on manual triggering; and finally, generating a report file, writing a verification result for the test application form in the task management system, and if the verification result is that verification is passed, issuing a service pack of the CVE vulnerability. The invention aims to realize efficient, traceable and extensible Linux vulnerability repair verification, realize full automation and intelligence of the vulnerability verification process, and improve the accuracy, traceability and expandability of verification.

This application provides a method, system, medium, and equipment for detecting thermal hazards in tunnels, relating to the field of tunnel safety detection. The method includes: acquiring geological feature data of the target tunnel; identifying a group of thermal hazard parameters with a correlation greater than a set threshold; setting a quantitative scoring range based on this; using the analytic hierarchy process (AHP) to assign weights and calculate hazard scores; then, combining relevant data to establish a dataset and training a lightweight gradient boosting model; finally, inputting data from an unexcavated tunnel section into the model to output the thermal hazard level. This application, by acquiring geological feature data, can accurately understand the environment, screen key parameters to eliminate redundancy, quantify parameters, and rationally allocate weights to ensure objective and accurate scores. It enables tunnel thermal hazard detection and early warning, providing guidance for prevention and control, reducing impact, and is of great significance to tunnel engineering.

The present application relates to elevator dispatching technical field, disclose a kind of elevator dispatching arbitration method, comprising the following steps: step 1: receiving multi-source call request, corresponding identity fingerprint is assigned to each call request and monitors the waiting time of each call request;Step 2: obtain the current load of target elevator and car remaining space, whether the current load of target elevator and car remaining space meets corresponding call request is judged;When the current load of target elevator or car remaining space does not meet corresponding call request, then cancel the call request;When the current load of target elevator and car remaining space both meet corresponding call request, then carry out step 3;Step 3: using dispatching score model to calculate call request, obtain the score of call request;Step 4: using shadow dispatcher to send shadow instruction to target elevator, shadow instruction triggers the corresponding stop layer action of target elevator.Simultaneously, a kind of elevator dispatching arbitration system is also disclosed.

The invention discloses a high-precision coordinate calculation method based on Matlab, and belongs to the field of coordinate calculation technology and data processing, and the method comprises the steps: firstly, obtaining the combination of all points and vectors through a specific combination generation function, and then initializing a result vector; aiming at each combination, calculating intersection point coordinates and parameters by virtue of an accurate geometric intersection point calculation function, storing the intersection point coordinates and parameters in a result vector, and distributing the intersection point coordinates and parameters to a working area according to a rule by virtue of a working area assignment function; then, a midpoint coordinate matrix is obtained by applying a midpoint calculation function based on the coordinates of the intersection points, the distance between the points is calculated, a clustering center is determined by adopting a clustering algorithm, points of an intersection point concentrated area are screened out according to distance characteristics in a cluster, and finally, high-precision coordinates are calculated through a weighted average calculation function in combination with priori knowledge and weights. According to the method, the coordinate calculation precision can be effectively improved, good noise immunity is achieved, priori knowledge can be fully fused, and the method is suitable for numerous fields with high coordinate precision requirements.

The application discloses an autonomous action prediction method based on a sequential space-time domain brain and muscle electric signal, first, a space-time graph network matrix is constructed, space-time data mapping is performed on the collected brain and muscle electric signal of a patient, and the signal is converted into a graph network matrix corresponding to a plurality of continuous time frames in a data window division manner; then, a graph network matrix of a future signal is predicted, the graph matrix data of the plurality of continuous time frames are sent into a graph convolutional neural network for analysis, and space-time data prediction is performed on the graph matrix corresponding to the future time frames; finally, target action recognition is performed, the predicted plurality of time frame graph matrices are subjected to pattern recognition through the graph convolutional neural network containing a plurality of full connection layers, the action corresponding to the signal is analyzed, and the corresponding action of a control auxiliary device is output in advance. The relatively high explainability of the algorithm can help popularize and apply the algorithm in the rehabilitation medical field, thereby helping more stroke patients.

The application discloses a device for measuring photochemical production rate of active gas in ambient atmosphere, and relates to the fields of atmospheric environment monitoring and automatic control. The device is composed of an air inlet module, a photochemical reaction device, a wideband high-precision cavity measurement system and a control system. The air inlet module injects pure ambient atmosphere or mixed atmosphere with added reaction gas into the photochemical reaction device; the photochemical reaction device is a place where the ambient atmosphere or the mixed atmosphere performs photochemical reaction to produce active gas; the wideband high-precision cavity measurement system samples the mixed atmosphere containing active gas and measures absorption photoelectric signals; and the control system receives the absorption photoelectric signals and performs calculation and processing to obtain the production rate of the active gas. The application has the advantages of automatically and quickly switching to measure the production rate of active gas under photochemical and non-photochemical conditions, and can accurately measure the production rate of active gas outdoors or in a laboratory.

The utility model discloses a silkworm breeding device capable of automatically controlling temperature and humidity. The silkworm breeding device comprises a silkworm information acquisition device, a data processing module, a data storage module, a display module, a temperature and humidity control module, an environment data acquisition device, a power supply module, an alarm module and a communication module, the silkworm information acquisition device, the data storage module, the display module, the temperature and humidity control module, the environment data acquisition device, the power supply module, the alarm module and the communication module are respectively connected with the data processing module. Through the integrated silkworm information collecting and processing system, the growth stage of silkworms can be automatically recognized, the temperature and humidity are automatically adjusted according to preset parameters, manual intervention is reduced, and the breeding efficiency is improved.

The application provides a construction of a fluorescent protein labeled microtubulin and a microtubule binding protein universal bivalent carrier, and the process is as follows: a first stage is to construct a GFP-alpha tubulin carrier, and a second stage is to construct a GFP-alpha tubulin-mCherry universal bivalent co-expression carrier; in the second stage, 35S, mCherry and NOS sequences are inserted into a KpnI enzyme cutting site of a multiple cloning site of the GFP-alpha tubulin carrier constructed in the first stage, and a single nucleic acid enzyme cutting site is inserted into the 5' end and the 3' end of the mCherry sequence, respectively, and the single nucleic acid enzyme cutting site is XbaI, KpnI / Acc65I and AscI sequences, respectively, so as to obtain the universal bivalent carrier. The universal bivalent carrier provided by the application can express two target genes simultaneously, has the fluorescent signals of GFP and mCherry, can quickly and accurately identify a transgenic plant, is convenient for positive seedling screening, can be used for a tobacco transient expression experiment, can shorten an experimental period, and saves time and effort.

The utility model discloses a quality inspection device for constructional engineering management, and belongs to the technical field of quality inspection devices. Comprising a holding part which is provided with a driving piece and a holding handle; the pushing cylinder is fixedly arranged on the holding part; the sampling head is arranged on the pushing cylinder in a sleeving manner and is in sliding fit with the pushing cylinder; a driving shaft is fixed to the power output end of the driving part, one end of the driving shaft is fixedly connected with a drill bit, one end of the pushing cylinder abuts against the drill bit and is in running fit with the drill bit, and the end, located in the sampling head, of the drill bit extends out of the sampling head; a plurality of groups of sampling cavities which are distributed in the circumferential direction are formed in the sampling disc and are used for collecting samples discharged from the sampling opening. The quality inspection device for constructional engineering management has the beneficial effects that through the arrangement of the sampling disc, chippings of different depths can be collected into different sampling cavities, and analysis is facilitated.

The invention discloses a decision-making system and method based on a Dores database, and the system comprises a data access layer which is used for accessing multi-source heterogeneous financial data in real time, a Dores storage calculation layer, and achieves the data storage, column-type bucket separation and materialized view pre-calculation based on the Dores database; the visual application layer is used for providing bidirectional interactive financial data visualization and decision support; wherein the data access layer acquires data in real time through a streaming computing engine and transmits the data to the Dores storage computing layer, and the visual application layer performs real-time data interaction with the Dores storage computing layer through a two-way communication protocol. According to the method, the synchronous delay of financial data is shortened from 6 hours to 1 second, second-level real-time integration is realized, the aggregation query response time of billion-level data is reduced to be within 1 second based on a Dores column type storage and materialized view technology, the user interaction response delay is lower than 500 milliseconds through WebSocket two-way communication, and real-time adjustment of parameters and dynamic refreshing of a billboard are supported.

The utility model discloses a kind of high-precision plug-in durability test equipment, belong to quick coupling detection technical field, including test box, the inside fixed connection of test box has workstation, the top fixed connection of workstation has the bottom plate of upper and lower parallel distribution, and fixedly connected with precision guide rod between bottom plate;The utility model, the setting of precision guide rod ensures that the sliding direction of push plate is accurate, prevents push plate deviation and causes plug alignment deviation;Female plug and female plug base thread connection, male plug and male head base bolt fixing mode, both facilitate staff to dismantle replacement female plug and male plug at any time, adapt to the test demand of different model plug, improve equipment versatility;Driving unit drives push plate to complete plug-in action automatically, replace manual operation, not only improve test efficiency, also avoid the error of manual operation, ensure the consistency of test result.

The application discloses a digital oscilloscope variable sampling rate acquisition and storage device, which comprises a data acquisition module, an upper computer, a data preprocessing module and a data cache module. The data acquisition module acquires data and sends the data to the data preprocessing module. The upper computer sets a threshold start position, a threshold end position and a sampling rate increase multiple according to user needs, and sets parameters for the data preprocessing module and the data cache module. According to control signals of the upper computer and the data cache module, the data preprocessing module changes the data extraction multiple, thereby changing the data sampling rate, and sends the data after the extraction to the data cache module. The data cache module caches the data, and sends control signals to the data preprocessing module according to the data cache condition. The application can adopt the variable sampling rate in the same waveform data, so that the user can observe the waveform details without wasting the storage space.

This invention discloses a method and system for predicting solar radio bursts based on a complete solar magnetograph, belonging to the field of solar radio technology. It includes: acquiring a complete solar magnetograph; inputting the complete solar magnetograph into a pre-trained improved ResNet model to obtain image feature vectors; dividing the image feature vectors into pseudo-time series and inputting them into an improved LSTM network to obtain solar radio burst prediction results; the improved ResNet model introduces a custom residual layer to extract small-scale features from the complete solar magnetograph, and the improved LSTM network introduces a gating mechanism to process the image feature vectors at different time scales. This method can improve the accuracy of solar radio burst prediction without utilizing solar radio spectrum data; it solves the problem that existing predictions using solar radio spectra are easily interfered with by the accuracy of the input data observations.

This application discloses a multi-source fusion log compression method and apparatus for anomaly detection, belonging to the field of anomaly detection technology. The multi-source fusion log compression method for anomaly detection includes: generating an audit origination graph corresponding to the system audit log, an application origination graph corresponding to the application log, and a domain name origination graph corresponding to the domain name system log based on the system audit log corresponding to the electronic device, the application log corresponding to the target application in the electronic device, and the domain name system log corresponding to the electronic device; fusing the domain name origination graph into the application origination graph based on the domain name nodes in the application origination graph to obtain a sub-fused origination graph; fusing the audit origination graph into the sub-fused origination graph based on the event nodes in the audit origination graph to obtain a fused origination graph; and performing anomaly detection based on the fused origination graph. The multi-source fusion log compression method for anomaly detection in this application can alleviate the problems of semantic gap and dependency explosion.

The utility model discloses a testing device for testing the flow coefficient of a flow regulating valve. The testing device comprises a water tank; the flow regulating valve is arranged on the main pipeline; the differential pressure sensor is connected to the main pipeline on the two sides of the flow regulating valve; the pressure difference regulating valve is arranged on the main pipeline; the pneumatic three-way valve is arranged on the main pipeline, an inlet of the pneumatic three-way valve is connected to an outlet of the differential pressure regulating valve, and a first outlet of the pneumatic three-way valve is connected to an inlet of the water tank; the container is connected with a second outlet of the pneumatic three-way valve; and the mass meter is used for measuring the mass of the container. According to the device, a weighing method is adopted for flow measurement, a PLC system is combined for control and data collection, operation of a three-way valve and an auxiliary pump and the rotating speed of the pump are controlled, and signals of a high-precision electronic balance and differential pressure signals of a differential pressure transmitter are collected, so that accurate evaluation of the micro flow regulating valve is achieved.

This invention provides a method and system for semantic novelty search of scientific and technological literature based on a large-scale pre-trained model, belonging to the field of information retrieval technology. The method includes: acquiring the target user's query input text and retrieval constraints; performing preprocessing and standardization to obtain preprocessed query input text; performing multi-granularity semantic encoding fusion to determine the semantic vector of the preprocessed query input text; performing domain-adaptive fine-tuning to obtain an optimized BERT model; constructing a feature classifier to generate feature semantic representations to obtain feature semantic representation results; performing comprehensive novelty assessment to obtain a comprehensive novelty rating; and performing automated difference analysis to obtain difference analysis results. This invention solves the technical problem in existing retrieval schemes based on pre-trained models that use single-granularity semantic representations, which cannot fully capture the complex semantic structure of professional terms, resulting in inaccurate novelty search results.

The utility model relates to cell culture tool technical field especially, more particularly to an array formula multi -hole separation cell culture dish. The utility model provides an array formula multi -hole separation cell culture dish, solves the technical problem that cell culture dish in prior art can only culture same kind of cell under same environment. An array formula multi -hole separation cell culture dish, including frame, culture cavity, culture cavity set up in frame, and mark, mark set up in frame, and, every mark corresponds an independent culture cavity, array formula multi -hole separation cell culture dish sets up a plurality of independent culture cavities, and every culture cavity can be regarded as an independent'small culture dish'. This makes under same frame, to same kind of microorganism in different nutrient solution, medicine or other environmental conditions can carry out culture experiment simultaneously.

The application belongs to the technical field of information security, and discloses an attribute correlation-based differential privacy anonymous method. First, the correlation between attributes is analyzed through data distribution analysis of a data set, the number of each equivalent group of each attribute group is calculated by using permutation and combination, all minimum attribute combinations are found, if the number of each equivalent group of the attribute combination is greater than or equal to 30, and there is an equivalent group with a number less than 30 in each equivalent group when any attribute is added, the attribute combination is a minimum equivalent group. Then, the set condition of each attribute is obtained by performing intersection on all minimum attribute groups, the number of each attribute under the intersection is calculated, then the priority of the attributes with intersection is divided, the intersection number is used as the privacy protection priority of the attribute, privacy budget is allocated through the privacy protection priority of each attribute, and finally, the attributes with intersection are protected by differential privacy.

The utility model provides a trigger type wireless infrared alarm device, which belongs to the monitoring field and comprises a power supply, a peripheral monitoring assembly is arranged on the power supply, a data storage assembly is arranged on the peripheral monitoring assembly, and an internal monitoring assembly is arranged on the peripheral monitoring assembly. According to the utility model, through the arrangement of the peripheral monitoring assembly and the data storage assembly, the power supply provides electric power during use, the infrared correlation sensor is arranged at a factory fence or other areas needing to be placed, and a plurality of areas can be monitored through the single-defense-area module, the eight-defense-area module and the output module; when the infrared correlation sensor senses, a signal is transmitted to the console, the console controls the first loudspeaker in the corresponding area to give an alarm, the first camera shoots, the main control display displays, and monitoring data can be preserved and stored for a long time through a hard disk video tape. And the video can be conveniently taken out for analysis when the past video needs to be watched.

The invention discloses a carbon dioxide inter-section displacement pre-fracturing process and a design method and related equipment thereof, and belongs to the technical field of oil and gas production, the design method comprises the following steps: establishing an integrated fractured horizontal well numerical simulation model according to seismic data of a target well, logging interpretation data and an engineering parameter range given by an oil production scheme; the integrated fractured horizontal well numerical simulation model is used for simulating single well yields under different section intervals and different single-section carbon dioxide injection amounts by adopting a section-separated gas injection method; drawing a parameter optimization chart based on the single well yield and the carbon dioxide injection section number obtained under different section distances and different single-section carbon dioxide injection amounts; and according to the parameter optimization plate, determining the final segment spacing and the single-segment carbon dioxide injection amount. While the recovery efficiency is improved, the construction efficiency is improved, and the fracturing cost is saved.

The application provides an aging tool for a plasma surgical device, wherein a multi-channel temperature sampling interface is connected with a plurality of temperature measuring components, the temperature measuring components measure temperature values of specified positions of the plasma surgical device; a microcontroller is connected with a foot control interface, a load interface and the multi-channel temperature sampling interface, wherein the microcontroller controls the start and stop of cutting and / or coagulation of the plasma surgical device through the foot control interface; the microcontroller controls power output through the load interface; the microcontroller obtains the temperature values measured by the temperature measuring components through the multi-channel temperature sampling interface, judges whether there is an over-temperature safety risk in the aging test according to whether the temperature values exceed a set threshold, and issues an alarm prompt. The application can realize automatic testing and real-time monitoring of the temperature of key positions, is beneficial to the analysis of bad temperature data, and effectively guarantees the quality of the device.

The utility model discloses a washing test machine for simulating washable ultraviolet-proof fabric, and particularly relates to the technical field of fabric detection, the washing test machine comprises a case, a partition plate is arranged in the case, a washing bin is arranged on one side of the partition plate, a machine bin is arranged on the other side of the partition plate, a containing assembly is mounted on the partition plate, and the containing assembly is arranged on the machine bin. A heating plate is arranged at the bottom end of the interior of the washing bin and connected with a heater arranged in the machine bin, a temperature sensor is installed in the middle of one side of the partition plate, a water level sensor is arranged above the temperature sensor, a water inlet is formed in the partition plate and connected with a water pump arranged in the machine bin, and a water outlet is formed in the water pump. A water drainage pipe is arranged at the bottom of the washing bin, supporting legs are installed at the bottom end of the machine box, an upper cover is hinged to the top end of the machine box, a lock catch is arranged between the upper cover and the machine box in a matched mode, and a sealing gasket is arranged at the connecting position of the upper cover and the top face of the washing bin. The water washing device has the advantages of being capable of improving the water washing effect, convenient to operate and observe, stable in water flow and capable of improving the detection efficiency.

The application discloses a mechanical and electrical equipment and electrical equipment remote AI monitoring system based on a management platform, and relates to the technical field of equipment monitoring.The application comprises a data server, a display unit and a control unit, the control unit comprises an edge computing layer, a data acquisition layer and an AI analysis engine, the AI analysis engine comprises a deep learning module, a photovoltaic optimization module, an agent cluster and a fault tracing module, the output end of the data acquisition layer is connected with the input end of the edge computing layer, the port of the edge computing layer is in bidirectional communication with the port of the data server, and the output end of the edge computing layer is connected with the input end of the deep learning module and the photovoltaic optimization module respectively.The application adopts multiple agent learning technologies, can realize sharing of model parameter updating among multiple parks, protects local data privacy at the same time, constructs an industry expert rule library, cross-verify with deep learning results, and avoids misjudgment caused by the black box model.

The utility model relates to detection device technical field, and disclose a kind of tapered roller diameter detection device, including detection platform, the upper end middle place of detection platform is provided with circular table, the upper end fixedly connected with fixed frame of circular table, the left and right ends middle place of fixed frame is evenly provided with lifting groove one, the inside sliding installation of lifting groove one has pressing plate, the outside sliding installation of pressing plate has two groups of measuring block, the upper end middle place of circular table is fixedly installed with inner taper hole seat, the left and right ends of fixed frame are evenly provided with lifting groove two at the downside of lifting groove one, the inside sliding installation of lifting groove two has measuring plate. The device can ensure that tapered roller keeps in the middle and perpendicular state during measurement, so as to eliminate the error caused by measuring point skew, and also can measure the diameter data of multiple cross sections of tapered roller, to provide more comprehensive detection results, improve processing quality.

The application discloses a flexible multi-body dynamics method verification experimental device, which is used in the field of flexible multi-body dynamics experiments. The system comprises a structure system, a driving system, a measuring system and a connecting system. The structure system comprises a flexible test piece, an auxiliary beam and a counterweight piece. The driving system comprises a servo motor and a feedback control component thereof. The measuring system comprises an accelerometer, an angular displacement sensor, an eddy current sensor and a high-speed camera. The connecting system comprises equivalent torsional spring pieces and design modules for fixing two flexible beam test pieces together, and the system fundamental frequency of the flexible beam is adjusted by changing the torsional spring stiffness. The application provides a device for multi-section flexible beam dynamics experiments, which can accurately measure the displacement response and acceleration response of the test piece, is consistent with the modeling analysis results, and provides an important tool for related research and development.

The application discloses a kind of based on graph structure enhancement's graph neural network method, belong to graph data analysis and graph representation learning technical field, specific steps are as follows: collect original graph structure data, and mark;Graph structure data is encoded by encoder, and preliminary node representation is obtained, preliminary node representation is reduced dimension by graph neural network, and low-dimensional node representation is obtained;And generate enhanced graph adjacency matrix;Repeat step S2 and step S3 until high homogeneity graph adjacency matrix is obtained;High homogeneity graph adjacency matrix, original graph adjacency matrix and low-dimensional node representation are input to encoder to carry out node classification task.The above-mentioned one based on graph structure enhancement's graph neural network method, low homogeneity graph is converted into high homogeneity graph, so that graph data is better adapted to existing graph neural network, improves the node classification performance in low homogeneity graph data, so that node classification task can be better carried out.

This invention discloses hollow silver-platinum nanoalloy particles, their preparation method, and applications. The silver-platinum nanoalloy particles have a particle size of 30-60 nm, an overall hollow structure, and a porous surface distribution of silver and platinum fused together. The preparation method includes: using epigallocatechin gallate as the sole reducing agent and stabilizer, reducing silver nitrate in ethylene glycol to prepare monodisperse silver nanoparticles; then, at 60-80°C, slowly adding chloroplatinic acid solution in batches to the silver nanoparticle solution to carry out an in-situ exchange reaction; after the reaction, washing and separation yields the final product. This invention provides a green, simple, mild, and highly controllable preparation method. The prepared silver-platinum nanoalloy particles simultaneously possess excellent nanozyme catalytic activity and high-sensitivity surface-enhanced Raman scattering performance, achieving integrated synergistic catalytic and detection functions. It has broad application prospects in food safety testing, environmental monitoring, and biosensing.

This application relates to a method, apparatus, electronic device, and storage medium for detecting abnormal server behavior, applied in the field of network security technology. The method includes: real-time acquisition of system call sequences during server process execution; dividing the system call sequence into N runtime phase subsequences, and further dividing the runtime phase subsequences corresponding to the target process's runtime phases into process activity subsequences; segmenting the system call sequence into multiple unidentified subsequences; inputting each unidentified subsequence into a process semantic abstraction model to obtain the named entity recognition result corresponding to each system call in the unidentified subsequence; aggregating and overwriting the named entity recognition results of multiple unidentified subsequences to obtain the named entity recognition result corresponding to each system call in the system call sequence; if unidentified named entities are included, determining that the system call sequence is abnormal, and sending an alarm message. This application can extract process behavior, facilitating expert analysis of abnormal events.