Method and system for detecting abnormal operation behavior of user

Method and system for detecting abnormal operation behavior of user

The invention provides a method and a system for detecting an abnormal operation behavior of a user, and belongs to the technical field of information security. The method comprises the following steps: acquiring user operation behavior data, and generating a time sequence; smoothing the time sequen...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: ZHENG CHUANYI, YUAN CHUNFENG, DUAN CUNMING
Format: Patent
Sprache:chi ; eng
Schlagworte:
CALCULATING
COMPUTING
COUNTING
ELECTRIC DIGITAL DATA PROCESSING
PHYSICS
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
container_end_page
container_issue
container_start_page
container_title
container_volume
creator ZHENG CHUANYI
YUAN CHUNFENG
DUAN CUNMING
description The invention provides a method and a system for detecting an abnormal operation behavior of a user, and belongs to the technical field of information security. The method comprises the following steps: acquiring user operation behavior data, and generating a time sequence; smoothing the time sequence by adopting a local weighted regression algorithm to generate a seasonal component; generating a trend residual sequence by using the time sequence and the seasonal component, and smoothing the trend residual sequence to generate a trend component; calculating the sum of the seasonal component and the trend component as a baseline component; generating a residual sequence by using the time sequence and the baseline component; performing quartile distance measurement on the residual error sequence, and calculating to generate a measurement value; calculating a judgment interval according to the metric value; and identifying an abnormal point of the residual error sequence by utilizing the judgment interval so as
format Patent
fullrecord <record><control><sourceid>epo_EVB</sourceid><recordid>TN_cdi_epo_espacenet_CN116627707A</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><sourcerecordid>CN116627707A</sourcerecordid><originalsourceid>FETCH-epo_espacenet_CN116627707A3</originalsourceid><addsrcrecordid>eNqNyrEKwjAQBuAsDqK-w_kAglVo5xIUF53cy7X5YwNtLiSn4Nvr4AM4fcu3NPYKHcURR0flXRQzecnkoBg0xAdxHyXPPJEkZNYgkXqM_ArfJZ6eBXltFp6ngs3PldmeT3d72SFJh5J4QIR29lZVdX1omn3THv85H4HhMow</addsrcrecordid><sourcetype>Open Access Repository</sourcetype><iscdi>true</iscdi><recordtype>patent</recordtype></control><display><type>patent</type><title>Method and system for detecting abnormal operation behavior of user</title><source>esp@cenet</source><creator>ZHENG CHUANYI ; YUAN CHUNFENG ; DUAN CUNMING</creator><creatorcontrib>ZHENG CHUANYI ; YUAN CHUNFENG ; DUAN CUNMING</creatorcontrib><description>The invention provides a method and a system for detecting an abnormal operation behavior of a user, and belongs to the technical field of information security. The method comprises the following steps: acquiring user operation behavior data, and generating a time sequence; smoothing the time sequence by adopting a local weighted regression algorithm to generate a seasonal component; generating a trend residual sequence by using the time sequence and the seasonal component, and smoothing the trend residual sequence to generate a trend component; calculating the sum of the seasonal component and the trend component as a baseline component; generating a residual sequence by using the time sequence and the baseline component; performing quartile distance measurement on the residual error sequence, and calculating to generate a measurement value; calculating a judgment interval according to the metric value; and identifying an abnormal point of the residual error sequence by utilizing the judgment interval so as</description><language>chi ; eng</language><subject>CALCULATING ; COMPUTING ; COUNTING ; ELECTRIC DIGITAL DATA PROCESSING ; PHYSICS</subject><creationdate>2023</creationdate><oa>free_for_read</oa><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&amp;date=20230822&amp;DB=EPODOC&amp;CC=CN&amp;NR=116627707A$$EHTML$$P50$$Gepo$$Hfree_for_read</linktohtml><link.rule.ids>230,308,780,885,25564,76547</link.rule.ids><linktorsrc>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&amp;date=20230822&amp;DB=EPODOC&amp;CC=CN&amp;NR=116627707A$$EView_record_in_European_Patent_Office$$FView_record_in_$$GEuropean_Patent_Office$$Hfree_for_read</linktorsrc></links><search><creatorcontrib>ZHENG CHUANYI</creatorcontrib><creatorcontrib>YUAN CHUNFENG</creatorcontrib><creatorcontrib>DUAN CUNMING</creatorcontrib><title>Method and system for detecting abnormal operation behavior of user</title><description>The invention provides a method and a system for detecting an abnormal operation behavior of a user, and belongs to the technical field of information security. The method comprises the following steps: acquiring user operation behavior data, and generating a time sequence; smoothing the time sequence by adopting a local weighted regression algorithm to generate a seasonal component; generating a trend residual sequence by using the time sequence and the seasonal component, and smoothing the trend residual sequence to generate a trend component; calculating the sum of the seasonal component and the trend component as a baseline component; generating a residual sequence by using the time sequence and the baseline component; performing quartile distance measurement on the residual error sequence, and calculating to generate a measurement value; calculating a judgment interval according to the metric value; and identifying an abnormal point of the residual error sequence by utilizing the judgment interval so as</description><subject>CALCULATING</subject><subject>COMPUTING</subject><subject>COUNTING</subject><subject>ELECTRIC DIGITAL DATA PROCESSING</subject><subject>PHYSICS</subject><fulltext>true</fulltext><rsrctype>patent</rsrctype><creationdate>2023</creationdate><recordtype>patent</recordtype><sourceid>EVB</sourceid><recordid>eNqNyrEKwjAQBuAsDqK-w_kAglVo5xIUF53cy7X5YwNtLiSn4Nvr4AM4fcu3NPYKHcURR0flXRQzecnkoBg0xAdxHyXPPJEkZNYgkXqM_ArfJZ6eBXltFp6ngs3PldmeT3d72SFJh5J4QIR29lZVdX1omn3THv85H4HhMow</recordid><startdate>20230822</startdate><enddate>20230822</enddate><creator>ZHENG CHUANYI</creator><creator>YUAN CHUNFENG</creator><creator>DUAN CUNMING</creator><scope>EVB</scope></search><sort><creationdate>20230822</creationdate><title>Method and system for detecting abnormal operation behavior of user</title><author>ZHENG CHUANYI ; YUAN CHUNFENG ; DUAN CUNMING</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-epo_espacenet_CN116627707A3</frbrgroupid><rsrctype>patents</rsrctype><prefilter>patents</prefilter><language>chi ; eng</language><creationdate>2023</creationdate><topic>CALCULATING</topic><topic>COMPUTING</topic><topic>COUNTING</topic><topic>ELECTRIC DIGITAL DATA PROCESSING</topic><topic>PHYSICS</topic><toplevel>online_resources</toplevel><creatorcontrib>ZHENG CHUANYI</creatorcontrib><creatorcontrib>YUAN CHUNFENG</creatorcontrib><creatorcontrib>DUAN CUNMING</creatorcontrib><collection>esp@cenet</collection></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext_linktorsrc</fulltext></delivery><addata><au>ZHENG CHUANYI</au><au>YUAN CHUNFENG</au><au>DUAN CUNMING</au><format>patent</format><genre>patent</genre><ristype>GEN</ristype><title>Method and system for detecting abnormal operation behavior of user</title><date>2023-08-22</date><risdate>2023</risdate><abstract>The invention provides a method and a system for detecting an abnormal operation behavior of a user, and belongs to the technical field of information security. The method comprises the following steps: acquiring user operation behavior data, and generating a time sequence; smoothing the time sequence by adopting a local weighted regression algorithm to generate a seasonal component; generating a trend residual sequence by using the time sequence and the seasonal component, and smoothing the trend residual sequence to generate a trend component; calculating the sum of the seasonal component and the trend component as a baseline component; generating a residual sequence by using the time sequence and the baseline component; performing quartile distance measurement on the residual error sequence, and calculating to generate a measurement value; calculating a judgment interval according to the metric value; and identifying an abnormal point of the residual error sequence by utilizing the judgment interval so as</abstract><oa>free_for_read</oa></addata></record>
fulltext fulltext_linktorsrc
identifier
ispartof
issn
language chi ; eng
recordid cdi_epo_espacenet_CN116627707A
source esp@cenet
subjects CALCULATING
COMPUTING
COUNTING
ELECTRIC DIGITAL DATA PROCESSING
PHYSICS
title Method and system for detecting abnormal operation behavior of user
url https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2024-12-21T15%3A58%3A20IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-epo_EVB&rft_val_fmt=info:ofi/fmt:kev:mtx:patent&rft.genre=patent&rft.au=ZHENG%20CHUANYI&rft.date=2023-08-22&rft_id=info:doi/&rft_dat=%3Cepo_EVB%3ECN116627707A%3C/epo_EVB%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_id=info:pmid/&rfr_iscdi=true