Countermeasure target key data acquisition system based on information gain value

Abstract

This invention discloses a countermeasure target key data acquisition system based on information gain value, including a monitoring module, a startup module, a capture module, an acquisition module, and a filtering module. The monitoring module monitors the information gain of the target data in real time. The startup module initiates subsequent programs to acquire target data information when the information gain value exceeds a threshold. The capture module is started by the startup module and then captures the target data. In the implementation of this invention, the information of the target data can be monitored in real time, and changes in the information gain value of the target data can be detected to capture key data, which helps prevent user equipment from attacks by unknown programs and allows for the capture of key information from the target data.

Description

Technical Field

[0001] This invention belongs to the field of communication technology, specifically a counter-target key data acquisition system based on information gain value. Background Technology

[0002] In information gain, the metric is how much information a feature brings to the classification system; the more information it brings, the more important the feature. For any given feature, the amount of information the system provides changes depending on whether it's present or absent; the difference in information content before and after is the amount of information that feature brings to the system.

[0003] Based on the changes in information gain, it is possible to judge the functional changes of target data and the changes of various data, which plays an extremely important role in practical applications. Summary of the Invention

[0004] In view of the above situation and to overcome the shortcomings of the prior art, the present invention provides a counter-target key data acquisition system based on information gain value, which effectively solves the problems in the background art.

[0005] To achieve the above objectives, the present invention provides the following technical solution: a counter-target key data acquisition system based on information gain value, comprising a monitoring module, a startup module, a capture module, an acquisition module, and a filtering module.

[0006] The monitoring module monitors the information gain of the target data in real time.

[0007] When the information gain value exceeds a threshold, the startup module can initiate subsequent programs to acquire information about the target data.

[0008] The crawling module is started by the startup module, and then the crawling module crawls the target data.

[0009] The data acquisition module collects key information from the captured data for analysis.

[0010] The filtering module filters the collected data to identify key data.

[0011] Preferably, it also includes a feature extraction module, which can filter feature values ​​in the target data to determine the information gain of the feature values, and a model building module, which can build a model for the changes in information gain of different feature values.

[0012] Preferably, it also includes the following steps:

[0013] Step one involves real-time monitoring of the target data. The startup module will activate when the gain value of the target data changes, but will not activate if the gain value remains unchanged or changes only slightly.

[0014] Step two: The startup module starts, and subsequent steps will then initiate a response.

[0015] Step three: The crawling module performs a complete crawling of the target data to facilitate subsequent analysis.

[0016] Step four involves collecting feature values ​​from the target data and analyzing the changes in the information gain of each feature value.

[0017] Step 5: Eliminate features with small changes in information gain value, leaving features with larger information gain value to capture key data.

[0018] Preferably, step one specifically includes the following steps:

[0019] S11, the monitoring module monitors the target data and analyzes its various features to determine the information gain of each feature.

[0020] S12: When the information gain in the target data changes, subsequent steps can be initiated; when the information gain of the target data does not change, the data is directly output.

[0021] Preferably, step four specifically includes the following steps:

[0022] S41, Set threshold information.

[0023] S42, calculate the information gain value of each feature, and compare the information gain value of each feature with the threshold information.

[0024] S43, when the information gain value of a feature is greater than or equal to the threshold, the information of that feature is retained; when the information gain value of a feature is less than the threshold, the information of that feature is discarded.

[0025] S44. Analyze the retained feature information to determine the function performed by the feature information and the change in information gain value.

[0026] S45: Extract key information from the target data based on the retained feature information.

[0027] Preferably, it also includes a storage module, which is used to store key information of the captured target data.

[0028] Compared with the prior art, the beneficial effects of the present invention are:

[0029] 1) When this invention is implemented, it can monitor the information of the target data in real time, and detect when the incremental value of the target data changes, so as to capture the key data of the target data, which is beneficial to prevent user equipment from being attacked by unknown programs and to capture the key information of the target data. Detailed Implementation

[0030] The technical solution of the present invention will be clearly and completely described below with reference to the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0031] This invention discloses a counter-target key data acquisition system based on information gain value, including a monitoring module, a startup module, a capture module, an acquisition module, and a filtering module.

[0032] The monitoring module monitors the information gain of the target data in real time. When the information gain value of the target data changes, the target data proceeds to subsequent steps; when the information gain value of the target data does not change significantly, the program is directly output.

[0033] When the information gain value exceeds a threshold, the startup module can initiate subsequent programs to acquire information about the target data.

[0034] The crawling module is started by the startup module, and then the crawling module performs a comprehensive crawling of the target data in order to analyze and identify various features in the target data.

[0035] The acquisition module collects key information from the captured data for analysis, specifically by extracting various features from the target information and determining the information gain value of each feature.

[0036] The filtering module filters the collected data to determine key feature data.

[0037] It also includes a feature extraction module, which can filter feature values ​​in target data to determine the information gain of feature values. It also includes a model building module, which can build models or charts for the changes in information gain of different feature values, such as determining the rate of change of target feature information gain values, the functions performed, and the distribution.

[0038] It also includes the following steps,

[0039] Step one involves real-time monitoring of the target data. The startup module will activate when the gain value of the target data changes, but will not activate if the gain value remains unchanged or changes only slightly.

[0040] Step two: The startup module starts, and subsequent steps will then initiate a response.

[0041] Step three: The crawling module performs a complete crawling of the target data to facilitate subsequent analysis.

[0042] Step four involves collecting feature values ​​from the target data and analyzing the changes in the information gain of each feature value.

[0043] Step 5: Remove features with small changes in information gain value, leaving features with large information gain value. Based on the features with large information gain value, extract information from the target data to capture the data containing this feature, which is the key data.

[0044] Step one specifically includes the following steps:

[0045] S11, the monitoring module monitors the target data and analyzes its various features to determine the information gain of each feature.

[0046] S12: When the information gain in the target data changes, subsequent steps can be initiated; when the information gain of the target data does not change, the data is directly output.

[0047] Step four specifically includes the following steps.

[0048] S41, Set threshold information. The threshold can be set differently depending on the usage environment and user needs.

[0049] S42, calculate the information gain value of each feature, and compare the information gain value of each feature with the threshold information.

[0050] S43: When the information gain value of a feature is greater than or equal to the threshold, the information of that feature is retained; when the information gain value of a feature is less than the threshold, the information of that feature is discarded. The threshold information can be set according to the user's own needs.

[0051] S44. Analyze the retained feature information to determine the function performed by the feature information and the change in information gain value.

[0052] S45. Based on the retained feature information, the key information of the target data is extracted. That is, based on the degree of change of the information gain value of a certain feature, the segment of the target data containing that feature is obtained, which is the key information.

[0053] It also includes a storage module, which is used to store key information of the captured target data, and also to save the target data information that triggered the startup module.

[0054] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus.

[0055] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents.

Claims

1. A counter-target key data acquisition system based on information gain value, characterized in that: It includes a monitoring module, a startup module, a capture module, a data collection module, and a filtering module. The monitoring module monitors the information gain of the target data in real time. When the information gain value exceeds a threshold, the startup module can initiate subsequent programs to acquire information about the target data. The crawling module is started by the startup module, and then the crawling module crawls the target data. The data acquisition module collects key information from the captured data for analysis. The filtering module filters the collected data to determine key data; It also includes a feature extraction module, which can filter feature values ​​in target data to determine the information gain of feature values, and a model building module, which can build a model for the changes in information gain of different feature values. It also includes the following steps, Step one involves real-time monitoring of the target data. The startup module will activate when the gain value of the target data changes, but will not activate if the gain value remains unchanged or changes only slightly. Step two: The startup module starts, and subsequent steps will then initiate a response. Step three: The crawling module performs a complete crawling of the target data to facilitate subsequent analysis. Step four involves collecting feature values ​​from the target data and analyzing the changes in the information gain of each feature value. Step 5: Remove features with small changes in information gain value and keep features with large information gain value in order to capture key data; Step four specifically includes the following steps. S41, Set threshold information. S42, calculate the information gain value of each feature, and compare the information gain value of each feature with the threshold information. S43, when the information gain value of a feature is greater than or equal to the threshold, the information of that feature is retained; when the information gain value of a feature is less than the threshold, the information of that feature is discarded. S44. Analyze the retained feature information to determine the function performed by the feature information and the change in information gain value. S45: Based on the retained feature information, extract key information from the target data. Step one specifically includes the following steps: S11, the monitoring module monitors the target data and analyzes its various features to determine the information gain of each feature. S12: When the information gain in the target data changes, subsequent steps can be initiated; when the information gain of the target data does not change, the data is directly output.

2. The counter-target key data acquisition system based on information gain value according to claim 1, characterized in that: It also includes a storage module, which is used to store key information of the captured target data.