Suspect detection method and device

The embodiment of the invention provides a suspect detection method and device. The method comprises the following steps: acquiring subway riding behavior data to be predicted; performing data analysis, data preprocessing and feature extraction on the subway riding behavior data to obtain processed riding behavior data; inputting the processed riding behavior data into an abnormal behavior detection model to obtain an identification result corresponding to the subway riding behavior data, wherein the abnormal behavior detection model is an auto-encoder model obtained by training based on a normal riding behavior data sample. According to the embodiment of the invention, an unsupervised learning model is established; the travel behaviors of normal passengers are reconstructed; the potentialcharacteristics of normal passenger behaviors are extracted through the model, normal passenger data can be well restored through the model, abnormal passenger data cannot be well restored, abnormalpassengers are recognized