Computer-implemented method and system for extracting rule of monitoring command-response pairs

The invention provides a computer-implemented method for extracting the rule of monitoring command-response pairs. The method comprises the steps of preparing a test set containing a plurality of command-response pairs; grouping a plurality of commands through clustering based on similarity; forming a group of responses for the plurality of commands of particular values within given parameters in the given test set; judging whether elements within the group of responses fall in a preset similarity range; and extracting the rule of monitoring the command-response pairs based on the relation between concentrated responses and commands, if the elements within the group of responses fall in the preset similarity range.