Communication security auditing model early warning method and device

The invention provides a communication security audit model early warning method and device, and relates to the technical field of data processing, and the method comprises the steps: collecting communication data traffic in real time through a communication network, and building a communication data traffic library; performing deep analysis on the data in the communication data flow library through a machine learning and artificial intelligence method, extracting network behavior characteristics, and establishing a network behavior model; comparing the communication data acquired in real time with the network behavior model, and judging whether the communication behavior is abnormal or not; and if the abnormal communication behavior exists, generating early warning information, and sending the early warning information to a manager in a predetermined mode. According to the invention, the network behavior characteristics are automatically extracted and the behavior model is established, so that abnormal behav