Encrypted mining traffic monitoring method and device based on traffic analysis and storage medium

The invention discloses a mining encrypted traffic monitoring method and device based on traffic analysis and a storage medium. The method comprises the following steps: determining a traffic source and a traffic target which are used as monitoring objects; acquiring a network monitoring log related to the encrypted traffic between the traffic source and the traffic target in the monitoring period; using a preset log record classification model to determine log record classification information corresponding to each log record in the network monitoring log, the log record classification information being used for indicating a log record category of the log record; determining theme information related to a hidden theme of the network monitoring log according to the log record classification information by utilizing a preset theme model based on hidden Dirichlet allocation; and determining whether a mining behavior exists between the flow source and the flow target or not according to the theme information. 本申