User behavior recognition method, system and device and storage medium

Abstract

The invention relates to the technical field of network user behavior recognition, in particular to a user behavior recognition method, system and device and a storage medium, and the method comprises the steps: carrying out the preprocessing of an IP data flow, and obtaining a corresponding coding vector and an attribute feature; according to the coding vector and a pre-constructed hypergraph expression model, converting the IP data stream and the attribute characteristics thereof in a preset time window into a multi-layer hypergraph; based on the multi-layer hypergraph, obtaining a hypergraph sequence corresponding to a time window according to an IP data stream in a continuous time window; and performing real-time behavior labeling on the hypergraph sequence to obtain a user behavior labeling sequence. According to the method provided by the invention, the network administrator can identify the user behavior through the network data flow without decrypting and acquiring high-level information, and meanwhile, the continuous access behavior rule of the user is described, so that the security of the Internet is effectively improved, and the application range is wide.

Description

technical field [0001] The invention relates to the technical field of network user behavior recognition, in particular to a network link-oriented user behavior recognition method, system, device and storage medium. Background technique [0002] The network link is a key link in data communication. It is the pipeline connecting the source and the destination. The network link undertakes the transmission task of data services. In order to ensure the normality and stability of the network link, many different technologies are applied to network link management. , including: load balancing, traffic engineering, security detection, etc. [0003] The network link is located in the middle and lower layers of the TCP / IP protocol stack, and the upper layer information is invisible to it. The existing link management technology mainly realizes link management from the perspective of traffic load. With the rapid growth of network scale and heterogeneity , With the rapid development a...

AI Technical Summary

Problems solved by technology

[0003] The network link is located in the middle and lower layers of the TCP / IP protocol stack, and the upper layer information is invisible to it. The existing link management technology mainly realizes link management from the perspective of traffic load. With the rapid growth of network scale and heterogeneity , With the rapid development and penetration of network services, the traditional "traffic"-oriented network link management methods can no longer meet new needs. Customized network link management based on user behavior rules, preferences, and habits has become a new development direction. However, Due to the position of the network link in the protocol stack, it is impossible to directly obtain user behavior information at the upper layer, and the increasingly popular data stream encryption technology further increases the difficulty of user behavior analysis. User behavior recognition is one of the important problems to be solved urgently

Images