The invention discloses a computer information exception identification and early warning method and
system, and particularly relates to the field of exception identification and early warning. Through monitoring cross-layer event
timestamp data generated by a
host machine and a container side, the time
record consistency of the two sides is evaluated; meanwhile, process-level behavior
metadata captured by the
virtual machine management program layer and the container kernel
namespace layer are analyzed, and the
visibility consistency degree of the multi-layer resource occupancy state is evaluated. And determining a cross-layer
visibility dislocation risk degree, and when the risk reaches a high
risk level, evaluating a multilayer lock competition abnormity risk by analyzing a kernel
event tracking sequence. And finally, the time
record consistency of the
host machine and the container side, the
visibility consistency degree of the multi-layer resource occupancy state and the multilayer lock competition abnormity risk are comprehensively analyzed, and the cross-layer visibility
dislocation alarm level is evaluated, so that accurate identification and early warning of computer information abnormity are realized, and the
operation safety and stability of a computer
system are effectively guaranteed.