Optimal clustering result screening method and device and electronic equipment

The invention discloses an optimal clustering result screening method. The method comprises the steps of collecting and marking different types of malicious samples; performing malicious feature extraction on the collected malicious samples through a static analysis method to obtain a total feature set; reducing the dimension of the total feature set by adopting a hierarchical principal componentanalysis mode to obtain a first feature set and persisting the first feature set; performing feature extraction on the clustering samples, and judging whether the malicious features exist in the clustering samples or not according to feature values of all dimensions of the first feature set; utilizing the first feature set to cluster the clustering samples with the clustering cluster number from 2to 10 to obtain a clustering result; and evaluating the clustering result by adopting a comprehensive index calculation mode to obtain an optimal K value, thereby screening out the optimal clusteringcluster number and obtaini