The application relates to the fields of
network communication anomaly detection and intelligent operation and maintenance, in particular to a behavior reasoning and AI intelligent disposal method and
system for communication anomalies, which comprises the following steps: collecting communication
interaction time sequence data and
protocol stack resource state data; constructing an ideal communication
state model based on interface contract analysis results,
protocol specification analysis results and queuing rules, and generating an ideal communication track benchmark according to a service request sequence in a preset time window; respectively performing
fault attack knowledge injection and
service load fluctuation rule injection to generate abnormal scene
simulation tracks and service tide
simulation tracks; performing difference calculation on real observation features and the ideal communication track benchmark to obtain a real
residual space, and generating an abnormal theoretical
residual space and a service tide theoretical
residual space; generating abnormal type results and
root cause results based on the topological similarity between the residual spaces, and outputting corresponding intelligent disposal instructions; and the application can accurately identify high-
concurrency legal tides and real attacks.