Transaction data filtering method and apparatus, and filtering implementation apparatus

Abstract

The invention provides a transaction data filtering method and apparatus, and a filtering implementation apparatus. The method comprises the following steps: merging transaction features with the samefeature value in a plurality of filtering rule streams, wherein the merged transaction features share the same matching identifier; matching transaction data with the plurality of filtering rule streams one by one; when the transaction data are matched with the first filtering rule stream, matching each transaction feature, and adding the corresponding matching identifier; when the transaction data are matched with the other filtering rule streams, matching the transaction features having no matching identifier, and adding the corresponding matching identifiers; and if the transaction data are successfully matched with each transaction feature in the current filtering rule stream, carrying the identity identifier of the current filtering rule stream in the transaction data. By adoption ofthe transaction data filtering method and apparatus provided by the invention, the matching times between the transaction features and the rules are reduced, the computation complexity of filtering the transaction data is reduced, the computation time of the CPU is reduced, and the processing efficiency and performance of filtering the transaction data are improved.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a transaction data filtering method, device and implementation device. Background technique [0002] By decoding the transaction data captured on the network, the transaction characteristics of the transaction can be extracted, such as IP (Internet Protocol, network protocol) address, port, transaction type, transaction return code, etc.; the characteristic values ​​of these transaction characteristics are transaction Therefore, there are no two transactions with all the same characteristic values, but transactions may have some of the same characteristic values, such as the same source IP address and the same transaction type. One or more transactions can be filtered out through one or more transaction characteristics, and the filtered transactions can be used to calculate statistical characteristics such as transaction volume and success rate. [0003] Usually, a set of char...

AI Technical Summary

Problems solved by technology

[0003] Usually, a set of characteristic values ​​of transaction characteristics is defined as a transaction flow, which contains one or more characteristic values ​​of transaction data; due to the large demand for data statistics, multiple transaction flows are often used to analyze transaction data at the same time. Filtering; during the filtering process, the transaction features in each transaction data need to be matched one by one with the corresponding feature values ​​in each transaction flow. Therefore, to complete the above filtering tasks, the CPU needs to repeat a large number of matching operations, and as the transaction As the amount of data or the number of transaction flows increases, the amount of CPU calculations increases exponentially, resulting in lower processing performance for filtered data.

Images