A real-time monitoring and blocking method and system for abnormal behavior of an internet of things terminal

By generating behavior interval graphs, conflict intensity tables, and scheduling conflict groups, combined with isolated forest sorting, dynamic capture of thread behavior and isolation of abnormal threads are achieved, solving the problem of thread behavior identification and tracing in existing technologies, and improving the real-time performance and effectiveness of security state management.

CN121356829BActive Publication Date: 2026-07-24ZHEJIANG ZHENGYUAN ZHIHUI TECH CO LTD
2 Cites 0 Cited by

Patent Information

Application Number
CN202511441085.1
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2025-10-10
Publication Date
2026-07-24
Estimated Expiration
2045-10-10

AI Technical Summary

Technical Problem

Existing technologies struggle to effectively identify abnormal thread behavior in multi-threaded resource contention scenarios. They lack detailed analysis of thread-level resource access sequences and dynamic interaction trajectories, cannot identify high-conflict paths in real time, and lack dynamic context analysis capabilities. As a result, abnormal thread behavior is hidden in frequent interactions and cannot be captured and traced in a timely manner.

Method used

By extracting thread execution cycles and resource access sequences, a behavior interval graph is generated, a conflict intensity table is constructed, high-intensity thread pairs are filtered, time period overlap rate is calculated, scheduling conflict groups are generated, and isolated forest sorting is adopted in combination with control command frequency and resource weight value. Permissions are suspended and resource call entry points are blocked to generate thread blocking sets and establish a conflict topology graph.

Benefits of technology

It achieves dynamic capture of thread behavior and efficient identification of abnormal pressure points, can isolate threads with abnormal behavior, statically freeze high-conflict paths, and realize the source tracing and policy adjustment of safety status under multi-threaded resource contention.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The application relates to the technical field of safety control, in particular to a real-time monitoring and blocking method and system for abnormal behaviors of an Internet of Things terminal. In the application, a thread execution cycle and a resource access sequence are extracted, a corresponding relationship between a cycle number and an interface calling frequency is established, a clear thread behavior structure can be constructed, the interaction mode between threads and resources can be dynamically captured, a resource calling interval is extracted, an execution position intersection is constructed and a resource naming consistency comparison is performed, through cross statistics of calling frequencies and path similarity construction, a dense area of resource access conflicts between threads can be refined, and quantitative intensity data is formed, through overlap rate calculation of an access period and thread grouping operation, an access behavior aggregation relationship can be established, a tension sequence is constructed in combination of a control instruction triggering frequency and a resource weight value, and an isolated forest sorting mechanism is introduced in combination of an access overlap situation, and efficient identification of abnormal stress points in thread behaviors can be realized.
Need to check novelty before this filing date? Find Prior Art