一种基于多维数据的异常行为识别方法、介质及设备

By dividing and dynamically aggregating time periods based on the timeliness of data dimensions, and combining mutation index and sparsity for feature extraction, the problem of untimely identification of abnormal behavior in existing technologies is solved, achieving higher identification accuracy and early warning efficiency.

CN122020499BActive Publication Date: 2026-07-17HANGZHOU YUNSHEN TECH CO LTD

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
HANGZHOU YUNSHEN TECH CO LTD
Filing Date
2026-04-16
Publication Date
2026-07-17

AI Technical Summary

Technical Problem

Existing methods for identifying abnormal behavior ignore the timeliness differences across different data dimensions. This leads to the inability to capture short-term mutation signals in a timely manner when device behavior changes drastically or when abnormal behavior is in a long incubation period. These signals are either diluted by historical data, resulting in untimely warnings or an increased false alarm rate.

Method used

Based on the degree of correlation between each data dimension and historical abnormal behavior, the system is divided into high, medium, and low timeliness types, dynamically determines the aggregation time period, and extracts features through mutation index, abnormal precursors, and sparsity to generate a high-quality feature dataset that adapts to the dynamic changes in device behavior.

Benefits of technology

It improves the accuracy of abnormal behavior identification, reduces the false negative rate, ensures the timeliness and accuracy of early warning, and balances data integrity and timeliness.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN122020499B_ABST
    Figure CN122020499B_ABST
Patent Text Reader

Abstract

本发明涉及数据处理技术领域,尤其涉及一种基于多维数据的异常行为识别方法、介质及设备,通过数据维度与历史异常行为发生时间的关联紧密程度,进行高、中、低三类时效性维度类型地划分,确保了各数据维度的处理策略与预警需求精准匹配;通过提取反映数据波动的突变指数、反映早期风险的异常先兆、反映数据分布的稀疏程度,使得异常行为的识别与风险信号捕捉更全面;通过结合维度类型、突变指数、异常先兆和稀疏程度动态确定目标聚合时间段,按目标聚合时间段聚合数据并提取特征数据集,使得数据聚合时间段具备自适应能力,兼顾数据完整性与预警时效性,提高了数据特征的质量,进而整合多维度特征生成识别信息,提升了异常行为识别的准确性。
Need to check novelty before this filing date? Find Prior Art