Abnormal information detection method and device, computer equipment and storage medium

Abstract

The invention relates to the technical field of big data, in particular to an abnormal information detection method and device, computer equipment, a storage medium and a computer program product. The method comprises the following steps: acquiring database table information in a plurality of operation environments; according to the change time of each piece of database table information, to-be-detected table information which changes in a preset time period is determined; and matching the standard data item with the to-be-detected table information, and in response to a result that the to-be-detected table information is inconsistent with the standard data item, taking the to-be-detected table information which is inconsistent with the standard data item as abnormal information. By adopting the method, the abnormal information which does not conform to the standard data item can be quickly detected in multiple operation environments, and the abnormal information detection efficiency is greatly improved.

Description

Technical Field

[0001] The present application relates to the field of big data technology, and in particular to a method, apparatus, computer equipment, storage medium and computer program product for detecting abnormal information. Background Art

[0002] According to the project development stage, the development environment of software applications can be divided into test environment, functional environment and production environment. In the test environment where the functions of the software application are not yet stable, developers can conduct self-tests on the software application or conduct joint debugging with other systems. The functional environment is closer to the formal production environment, and generally does not allow for false data. The production environment is the actual application environment of the software application for users.

[0003] However, the digital standardization work of some enterprises is relatively lagging behind. There are problems such as inconsistent data table structures and inconsistent table fields in the test environment, functional environment and production environment of software applications, which easily lead to serious program failures in the production environment. Developers often need to manually compare thousands of data to determine abnormal information that does not meet the requirements of the unified format specification, which is time-consuming and labor-intensive. Summary of the invention

[0004] Based on this, it is necessary to provide an efficient abnormal information detection method, device, computer equipment, computer readable storage medium and computer program product to address the above technical problems.

[0005] In a first aspect, the present application provides a method for detecting abnormal information, comprising:

[0006] Get database table information in multiple operating environments;

[0007] According to the change time of each database table information, determine the table information to be detected that has changed within a preset time period;

[0008] The standard data items are used to match the table information to be detected. In response to the result that the table information to be detected does not match the standard data items, the inconsistently matched table information to be detected is used as abnormal information.

[0009] In one embodiment, the step of determining the table information to be detected that has changed within a preset time period according to the change time of each database table information includes:

[0010] Determine a database table object corresponding to each of the database table information;

[0011] Determining the change time according to the operation record of the database table object;

[0012] In response to the change time being within the preset time period, the table information to be detected is determined.

[0013] In one embodiment, the matching of the standard data item with the table information to be detected, and in response to a result that the table information to be detected does not match the standard data item, treating the inconsistently matched table information to be detected as abnormal information, includes:

[0014] According to the database table object, the database table information is stored in an array object;

[0015] Iterate over each element in the array object to loop through the following operations:

[0016] Matching the column name of the standard data item with the field name of the table information to be detected to obtain a name matching result of the table information to be detected;

[0017] Matching the data type of the standard data item with the field type of the table information to be detected to obtain a type matching result of the table information to be detected;

[0018] Matching the data length of the standard data item with the field length of the table information to be detected to obtain a length matching result of the table information to be detected;

[0019] In response to any one of the name matching result, the type matching result or the length matching result being inconsistent with the standard data item, the to-be-detected table information is used as the abnormal information.

[0020] In one embodiment, traversing each element in the array object includes:

[0021] The operation of traversing each element in the array object is performed in response to a trigger request of a scheduled task at every preset period.

[0022] In one embodiment, obtaining database table information in multiple operating environments includes:

[0023] Acquire data source configuration information corresponding to the plurality of operating environments;

[0024] Determine the corresponding data source name according to the data source configuration information;

[0025] The database table information is obtained by accessing the data source name in the operating environment.

[0026] In one embodiment, the method further comprises:

[0027] Generate an anomaly detection result according to the matching result between the anomaly information and the standard data item;

[0028] Displaying the anomaly detection result in a visualization page;

[0029] The abnormality information is returned in response to a triggering operation on the abnormality detection result through the visualization page.

[0030] In a second aspect, the present application also provides a device for detecting abnormal information, including:

[0031] Information acquisition module, used to obtain database table information under multiple operating environments;

[0032] An information screening module, used to determine the table information to be detected that has changed within a preset time period according to the change time of each database table information;

[0033] The abnormality detection module is used to match the table information to be detected with the standard data item, and in response to the result that the table information to be detected does not match the standard data item, the inconsistently matched table information to be detected is used as abnormal information.

[0034] In a third aspect, the present application further provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the method for detecting abnormal information described in any one of the embodiments of the first aspect above is implemented.

[0035] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the method for detecting abnormal information described in any one of the embodiments in the first aspect above is implemented.

[0036] In a fifth aspect, the present application further provides a computer program product, including a computer program, which, when executed by a processor, implements the method for detecting abnormal information described in any one of the embodiments in the first aspect above.

[0037] The above-mentioned abnormal information detection method, device, computer equipment, storage medium and computer program product obtain database table information under multiple operating environments; determine the table information to be detected that has changed within a preset time period based on the change time of each database table information; use standard data items to match the table information to be detected, and in response to the result that the table information to be detected and the standard data items are inconsistent, the inconsistently matched table information to be detected is used as abnormal information. Abnormal information that does not meet the standard data items can be quickly detected from multiple operating environments, thereby greatly improving the efficiency of abnormal information detection. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related technologies, the drawings required for use in the embodiments or the related technical descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0039] Figure 1 An application environment diagram of a method for detecting abnormal information in an embodiment;

[0040] Figure 2 1 is a flow chart of a method for detecting abnormal information in one embodiment;

[0041] Figure 3 A schematic diagram of a flow chart of a step of obtaining information of a table to be detected in an embodiment;

[0042] Figure 4 A schematic diagram of a process of detecting abnormal information in one embodiment;

[0043] Figure 5 A schematic diagram of a process for obtaining database table information in one embodiment;

[0044] Figure 6 A flowchart of a step of visually displaying abnormal information in one embodiment;

[0045] Figure 7 is a structural block diagram of a device for detecting abnormal information in an embodiment;

[0046] FIG. 8 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0047] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0048] The abnormal information detection method provided in the embodiment of the present application can be applied to Figure 1In the application environment shown. Among them, the terminal 102 communicates with the server 104 through the network. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other network servers. Specifically, the server 104 can obtain the database table information of the terminal 102 under multiple operating environments. According to the change time of each database table information, the table information to be detected that changes within a preset time period can be determined. Standard data items are used to match the table information to be detected, and in response to the result that the table information to be detected matches the standard data items inconsistently, the inconsistent table information to be detected is used as abnormal information. Among them, the terminal 102 can be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, Internet of Things devices and portable wearable devices, and the Internet of Things devices can be smart TVs, smart car-mounted devices, etc. Portable wearable devices can be smart watches, smart bracelets, head-mounted devices, etc. The server 104 can be a server cluster composed of an independent server or multiple servers.

[0049] In an exemplary embodiment, Figure 2 As shown, a method for detecting abnormal information is provided, and the method is applied to Figure 1 The server 104 in the example is used as an example to illustrate the method, which includes the following steps S202 to S206. Among them:

[0050] Step S202, obtaining database table information under multiple operating environments.

[0051] The operating environment may include but is not limited to the R&D environment, test environment or functional environment of the same application system.

[0052] The database table information may include but is not limited to any one or more of the following information: database table name, database table field, table field attribute (eg, data type and data length of the table field).

[0053] Optionally, in some implementations, the server can directly read the corresponding database table information from the databases of multiple operating environments. Alternatively, in other implementations, the server can also set a data sharing interface in the database of each operating environment that is connected to the databases of other operating environments by compiling a computer program language source program, so that the database table information of all databases in multiple operating environments can be read by accessing only the database in any one of the operating environments.

[0054] Step S204: According to the change time of each database table information, the table information to be detected that has changed within a preset time period can be determined.

[0055] The change time may indicate the time when the database table information is modified.

[0056] For example, in some implementations, the server may query and obtain a change record of each database table information, and then read the change time of each database table information from the change record. In response to the change time of the database table information being within a preset time period, the server may determine the database table information as the table information to be detected that has changed within the preset time period.

[0057] Optionally, in other embodiments, the server may also determine the preset time period based on the detection time input by the user. For example, the server may use the detection time as the end time of the preset time period, and in response to the change time being before the detection time, use the corresponding database table information as the table information to be detected. Alternatively, the server may use the detection time as the start time of the preset time period, and in response to the change time being after the detection time, use the corresponding database table information as the table information to be detected.

[0058] Step S206, using the standard data item to match the table information to be checked, in response to the result that the table information to be checked does not match the standard data item, the inconsistently matched table information to be checked is used as abnormal information.

[0059] The standard data items may represent database table specifications in a production environment where the application system is put into production, and may include but not be limited to standard data items such as database table name, table field name, table field type, and table field length.

[0060] Exemplarily, in some embodiments, standard data items may be pre-stored in the server. The server may match the table information to be detected using the standard data items to obtain a matching result between the table information to be detected and the standard data items. In response to the result that the table information to be detected does not match the standard data items, the table information to be detected is used as abnormal information. The subsequent server may store the abnormal information in a corresponding dedicated database, or send the abnormal information to the client for display.

[0061] Optionally, in other implementations, the server may use string matching to match the database table name in the table information to be detected with the standard data item of the database table name. Alternatively, the type compatibility principle (as long as the same data type exists in the two, it is considered to be a consistent match) is used to match the data type of the table field in the table information to be detected with the standard data item of the table field type. Alternatively, the length compatibility principle (the larger value between the two is taken as the compatible length for detection, and if it is less than the compatible length, it is considered to be a consistent match) is used to match the data length of the table field in the table information to be detected with the standard data item of the table field length.

[0062] In the above-mentioned method for detecting abnormal information, by obtaining database table information under multiple operating environments; according to the change time of each database table information, determining the table information to be detected that has changed within a preset time period; using standard data items to match the table information to be detected, in response to the result that the table information to be detected and the standard data items are inconsistent, the inconsistently matched table information to be detected is used as abnormal information, which can quickly detect abnormal information that does not meet the standard data items from multiple operating environments, thereby greatly improving the efficiency of abnormal information detection.

[0063] In an exemplary embodiment, Figure 3 As shown, the above step S204 may include steps S302 to S306. Among them:

[0064] Step S302: determine the database table object corresponding to each database table information.

[0065] Exemplarily, in some implementations, the server may determine the database table object corresponding to each database table information according to the database table name corresponding to each database table information, wherein the database table object may be constructed by using the database table name as the object name and the database table information as the object attribute.

[0066] Step S304, determining the change time according to the operation record of the database table object.

[0067] Exemplarily, in some implementations, a user object table may be pre-stored in the server. The user record table may store operation records of all objects of the user. The database table object operation record may be queried from the user object table according to the name of the database table object. The operation record time of the database table object is read to obtain the change time of the database table information corresponding to the database table object.

[0068] Step S306, in response to the change time being within the preset time period, determining the table information to be detected.

[0069] Optionally, in some embodiments, when the server receives a detection time that is earlier than the last operation record time of the database table object, the server may also use the time period between the detection time and the last operation record as a preset time period, thereby determining the table information to be detected that was modified after the detection time and before the last operation record.

[0070] In this embodiment, by using the database table object as the query primary key, determining the change time of the database table information, and obtaining the to-be-detected table information that has changed within a preset time period, the efficiency of determining the to-be-detected table information can be improved.

[0071] In an exemplary embodiment, Figure 4 As shown, the above steps include the following steps S402-S412. Among them,

[0072] Step S402: storing the database table information into an array object according to the database table object.

[0073] Exemplarily, the server may store the database table information in a corresponding array object based on the database table object corresponding to the database table information as an element in the array object. For example, an object may be constructed using the database table name corresponding to the database table information, and the attributes of the database table field (field length, field type, etc.) may be used as the attributes of the object, thereby forming an array object corresponding to the database table information.

[0074] Step S404, traverse each element in the array object to loop through the following operations.

[0075] Exemplarily, the server may use a loop statement to traverse each element in the array object and perform the following operations S406-S412.

[0076] Step S406: Match the column names of the standard data items with the field names of the table information to be detected to obtain a name matching result of the table information to be detected.

[0077] Exemplarily, the server may store the standard data items in the form of a table corresponding to the array object. The server may sequentially match each column name of the standard data item with each field name of the table information to be detected, thereby generating a name matching result of the table information to be detected.

[0078] Step S408: Match the data type of the standard data item with the field type of the table information to be detected to obtain a type matching result of the table information to be detected.

[0079] Exemplarily, the server may use the data type of the standard data item to match the field type of the table information to be detected, and when the data type and the field type are the same, a type matching result is generated that the table information to be detected matches the standard data item consistently. When the data type and the field type are completely different, a type matching result is generated that the table information to be detected matches the standard data item inconsistently.

[0080] Optionally, in some embodiments, when the name matching result in the above step S406 is consistent, the server can use the data type corresponding to the column name in the standard data item to perform compatibility matching with the field type corresponding to the field name in the table information to be detected, and use the type with a larger data coverage range between the data type and the field type as the compatible type, and establish and store the association between the column name, field name and compatible type. The currently matched field type is used as the type that matches the compatibility of the data type, and a type matching result that is consistent with the compatibility matching of the table information to be detected and the standard data line is generated.

[0081] Step S410: Match the data length of the standard data item with the field length of the table information to be detected to obtain a length matching result of the table information to be detected.

[0082] Exemplarily, the server may match the data length of the standard data item with the field length of the table information to be detected. When the data length is greater than the field length, a result is generated that the table information to be detected matches the standard data item. When the data length is less than the field length, a length matching result is generated that the table information to be detected matches the standard data item inconsistently.

[0083] Optionally, in some implementations, the server may also refer to the compatible matching method provided in the above-mentioned embodiment. When the name matching result in the above-mentioned step S406 is a consistent match, the longer length between the data length corresponding to the column name and the field length corresponding to the field name is used as the compatible length, and an association between the column name, the field name and the compatible length is established and stored, so as to generate a length matching result that is consistent with the compatibility match between the table information to be detected and the standard data item.

[0084] Step S412: in response to any one of the name matching result, the type matching result or the length matching result being inconsistent with the standard data item, the table information to be checked is taken as abnormal information.

[0085] Exemplarily, the server can respond to any of the name matching results, type matching results or length matching results between the table information to be checked and the standard data item of the same database table, and store the table information to be checked as abnormal information in the corresponding database to complete the compliance detection operation of an element in the array object. Jump to step S404, and repeat the operations of steps S406-S412 for the next element in the data object until the array object traversal is completed.

[0086] In this embodiment, by storing the information of the table to be checked in the form of an array object, a loop traversal method is used to match each element in the array object, that is, the information of the table to be checked in each database table, with the standard data item in turn, to implement a compliance check on the information of the table to be checked, which can improve the detection efficiency and accuracy of abnormal information.

[0087] In an exemplary embodiment, the server may display the exception information to a technician so that the technician can correct the exception information.

[0088] The above step S404 may also be implemented in the following manner: in response to a trigger request of a timed task at every preset period, an operation of traversing each element in the array object is executed.

[0089] Exemplarily, a scheduled task may be deployed in the server, and the operations of steps S404-S412 are stored in the scheduled task. Every preset period, the server may respond to the triggering request of the scheduled task and execute the operations of steps S404-S412 to re-determine the abnormal information that still exists at the current moment.

[0090] In this embodiment, the abnormal information detection operation is performed by timing task polling, which can improve the real-time performance of the abnormal information detection.

[0091] In an exemplary embodiment, Figure 5 As shown, the above step S202 includes steps S502-S506, wherein:

[0092] Step S502: Acquire data source configuration information corresponding to multiple operating environments.

[0093] Step S504: determine the corresponding data source name according to the data source configuration information.

[0094] Step S506: Use the data source name to access and obtain database table information in the operating environment.

[0095] Exemplarily, the server can obtain configuration files corresponding to multiple operating environments respectively, and parse the configuration files to obtain data source configuration information. The unique name of the data source, that is, the data source name, is obtained from the data source configuration information. The corresponding data source is accessed in the operating environment using the data source name to obtain database table information of the data source.

[0096] Optionally, in some implementations, the server may also set a calling interface in the database under any operating environment, and use the database name to define the calling object of the calling interface to enable the database under the current operating environment to call the database under other operating environments, thereby improving the efficiency of obtaining database table information.

[0097] In this embodiment, multiple data source libraries in multiple operating environments are connected by database names, which can reduce the missed detection rate of database table information.

[0098] In an exemplary embodiment, Figure 6 As shown, the abnormal information detection method provided by the present application further includes steps S602-S606, wherein:

[0099] Step S602: Generate an anomaly detection result based on the matching result between the anomaly information and the standard data item.

[0100] Exemplarily, the server may generate an anomaly detection result using the inconsistent content in the matching results between the abnormal information and the standard data items. For example, when the name matching result is an inconsistent match, the abnormal detection result is generated with the field name. When the type matching result is an inconsistent match, the abnormal detection result is generated with the field type. Similarly, when the length matching result is an inconsistent match, the abnormal detection result is generated with the field length. Alternatively, the server may generate an abnormal detection result corresponding to the abnormal information based on the amount of information that is inconsistent with the matching of the abnormal information and the standard data items.

[0101] Step S604: display the anomaly detection result on a visualization page.

[0102] Step S606: Return the abnormality information in response to the triggering operation on the abnormality detection result through the visualization page.

[0103] For example, the server may display the anomaly detection result in a visualization page. In response to a user's triggering operation such as clicking, browsing, or downloading the anomaly detection result, the visualization page returns detailed anomaly information and displays it on the visualization page, so that the user can quickly locate the information content in the anomaly information that does not meet the standard data.

[0104] In this embodiment, anomaly detection results of the abnormal information are generated according to the matching results of the abnormal information and the standard data items, and the anomaly detection results are displayed in a visualization page. In response to the user's trigger operation to browse and download the abnormal information, the abnormal information can be made more intuitive in a visual way.

[0105] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0106] Based on the same inventive concept, the embodiment of the present application also provides a detection device for abnormal information for implementing the detection method for abnormal information involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in the embodiments of the detection device for one or more abnormal information provided below can refer to the limitations of the detection method for abnormal information above, and will not be repeated here.

[0107] In an exemplary embodiment, Figure 7 As shown, a detection device 700 for abnormal information is provided, including: an information acquisition module 702, an information screening module 704 and an abnormality detection module 706, wherein:

[0108] The information acquisition module 702 is used to acquire database table information in multiple operating environments.

[0109] The information screening module 704 is used to determine the table information to be detected that has changed within a preset time period according to the change time of each database table information.

[0110] The abnormality detection module 706 is used to match the table information to be detected with the standard data item, and in response to the result that the table information to be detected does not match the standard data item, use the inconsistent table information to be detected as abnormal information.

[0111] In an exemplary embodiment, the information screening module 704 includes: an object determination unit, used to determine the database table object corresponding to each of the database table information; a time determination unit, used to determine the change time according to the operation record of the database table object; an information determination unit, used to determine the table information to be detected in response to the change time being within the preset time period.

[0112] In one embodiment, the anomaly detection module 706 includes: an array storage unit, used to store the database table information into an array object according to the database table object; an array traversal unit, used to traverse each element in the array object to loop the following operations: matching the column name of the standard data item with the field name of the table information to be detected to obtain a name matching result of the table information to be detected; matching the data type of the standard data item with the field type of the table information to be detected to obtain a type matching result of the table information to be detected; matching the data length of the standard data item with the field length of the table information to be detected to obtain a length matching result of the table information to be detected; in response to any one of the name matching result, the type matching result or the length matching result being inconsistent with the standard data item, treating the table information to be detected as the anomaly information.

[0113] In one of the embodiments, the array traversal unit is further used to execute the operation of traversing each element in the array object in response to a trigger request of a scheduled task at every preset period.

[0114] In one embodiment, the information acquisition module 702 includes: a configuration acquisition unit, used to acquire data source configuration information corresponding to the plurality of operating environments; a name determination module, used to determine the corresponding data source name according to the data source configuration information; and an information access module, used to access the database table information in the operating environment using the data source name.

[0115] In one embodiment, the abnormal information detection device 700 also includes: a result generation module, which is used to generate an abnormality detection result based on the matching result between the abnormal information and the standard data item; a result display module, which is used to display the abnormality detection result in a visualization page; and an information return module, which is used to return the abnormal information through the visualization page in response to a triggering operation on the abnormality detection result.

[0116] Each module in the above-mentioned abnormal information detection device can be implemented in whole or in part by software, hardware and a combination thereof. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0117] In an exemplary embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be shown in FIG8. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. The processor, the memory and the input / output interface are connected via a system bus, and the communication interface is connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data such as database table information, table information to be detected, standard data items, and abnormal information. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a method for detecting abnormal information is implemented.

[0118] Those skilled in the art will understand that the structure shown in FIG. 8 is merely a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0119] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above-mentioned method embodiments when executing the computer program.

[0120] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0121] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0122] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0123] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0124] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0125] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A method for detecting abnormal information, characterized in that: The method comprises: Get database table information in multiple operating environments; According to the change time of each database table information, determine the table information to be detected that has changed within a preset time period; The standard data items are used to match the table information to be detected. In response to the result that the table information to be detected does not match the standard data items, the inconsistently matched table information to be detected is used as abnormal information.

2. The method according to claim 1, characterized in that The step of determining the table information to be detected that has changed within a preset time period according to the change time of each database table information includes: Determine a database table object corresponding to each of the database table information; Determining the change time according to the operation record of the database table object; In response to the change time being within the preset time period, the table information to be detected is determined.

3. The method according to claim 2, characterized in that The adopting standard data items to match the table information to be detected, and in response to a result that the table information to be detected does not match the standard data items, taking the inconsistently matched table information to be detected as abnormal information, comprises: According to the database table object, the database table information is stored in an array object; Iterate over each element in the array object to loop through the following operations: Matching the column name of the standard data item with the field name of the table information to be detected to obtain a name matching result of the table information to be detected; Matching the data type of the standard data item with the field type of the table information to be detected to obtain a type matching result of the table information to be detected; Matching the data length of the standard data item with the field length of the table information to be detected to obtain a length matching result of the table information to be detected; In response to any one of the name matching result, the type matching result or the length matching result being inconsistent with the standard data item, the to-be-detected table information is used as the abnormal information.

4. The method according to claim 3, characterized in that The traversing each element in the array object includes: The operation of traversing each element in the array object is performed in response to a trigger request of a scheduled task at every preset period.

5. The method according to claim 1, characterized in that The obtaining of database table information under multiple operating environments includes: Acquire data source configuration information corresponding to the plurality of operating environments; Determine the corresponding data source name according to the data source configuration information; The database table information is obtained by accessing the data source name in the operating environment.

6. The method according to any one of claims 1 to 5, characterized in that The method further comprises: Generate an anomaly detection result according to the matching result between the anomaly information and the standard data item; Displaying the anomaly detection result in a visualization page; The abnormality information is returned in response to a triggering operation on the abnormality detection result through the visualization page.

7. A device for detecting abnormal information, characterized in that: The device comprises: Information acquisition module, used to obtain database table information under multiple operating environments; An information screening module, used to determine the table information to be detected that has changed within a preset time period according to the change time of each database table information; The abnormality detection module is used to match the table information to be detected with the standard data item, and in response to the result that the table information to be detected does not match the standard data item, the inconsistently matched table information to be detected is used as abnormal information.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images