Abnormal user detection method and device, equipment and storage medium

The embodiment of the invention provides an abnormal user detection method and device, equipment and a storage medium. The method comprises the following steps: acquiring behavior data of a plurality of users; clustering each user according to the behavior data of each user in the plurality of users; performing association rule extraction according to the clustered behavior data of the users in each category to obtain an association rule of each category; and detecting an abnormal user in the plurality of users according to the behavior data of each user and the association rule of each category. According to the embodiment of the invention, the abnormal user detection accuracy and the operation and maintenance efficiency can be improved. 本申请实施例提供一种异常用户检测方法、装置、设备及存储介质。该方法包括：获取多个用户的行为数据；根据多个用户中每个用户的行为数据，对每个用户进行聚类；根据聚类后的每个类别中的用户的行为数据进行关联规则提取，得到每个类别的关联规则；根据每个用户的行为数据与每个类别的关联规则，检测多个用户中的异常用户。根据本申请实施例，能够提高异常用户检测准确率以及运维效率。