CN109284221B - Early warning system and method - Google Patents

Early warning system and method Download PDF

Info

Publication number
CN109284221B
CN109284221B CN201811285176.0A CN201811285176A CN109284221B CN 109284221 B CN109284221 B CN 109284221B CN 201811285176 A CN201811285176 A CN 201811285176A CN 109284221 B CN109284221 B CN 109284221B
Authority
CN
China
Prior art keywords
operation data
abnormal
transaction
data
early warning
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201811285176.0A
Other languages
Chinese (zh)
Other versions
CN109284221A (en
Inventor
苏克菊
王强
李丽
岳磊
张嘉慧
袁帅
童辉
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Agricultural Bank of China
Original Assignee
Agricultural Bank of China
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Agricultural Bank of China filed Critical Agricultural Bank of China
Priority to CN201811285176.0A priority Critical patent/CN109284221B/en
Publication of CN109284221A publication Critical patent/CN109284221A/en
Application granted granted Critical
Publication of CN109284221B publication Critical patent/CN109284221B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/30Monitoring
    • G06F11/34Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment
    • G06F11/3438Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment monitoring of user actions

Landscapes

  • Engineering & Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Debugging And Monitoring (AREA)

Abstract

The invention discloses an early warning system and a method, comprising the following steps: the automatic transaction server uninterruptedly and automatically simulates the preset transaction and monitors first operation data of the preset transaction in the execution process; the analysis server analyzes whether the first operation data are abnormal data or not and sends the abnormal first operation data to the analysis server; the analysis server judges whether the first screen recording picture is abnormal or not, and sends the abnormal screen recording picture to the early warning center server; and the early warning center server analyzes the first operation data, and determines an abnormal reason and early warning measures. Therefore, the abnormal conditions of the transaction can be known in time, and the early warning measures can be determined.

Description

Early warning system and method
Technical Field
The invention relates to the field of system early warning, in particular to an early warning system and an early warning method.
Background
At present, a bank system needs to execute a lot of transactions every day, sometimes the transaction slowness phenomenon occurs due to system problems or network problems, but even if the customer finds the slowness, complaints are not carried out immediately. Effective early warning of the transaction system cannot be realized for the occurrence of the problems.
In addition, in the prior art, the early warning of the system generally includes the early warning of the use condition of the CPU, the hard disk space and the like, and there is no early warning method for the transaction system.
Disclosure of Invention
In view of this, the embodiment of the present invention discloses an early warning system and method, and the system includes: the early warning method of the transaction system is realized, the abnormal condition can be known in real time, and corresponding early warning measures can be taken.
The embodiment of the invention discloses an early warning system, which comprises:
the system comprises an automatic transaction server, a screen recording camera, an analysis server and an early warning center server;
the automatic transaction server is used for uninterruptedly and automatically simulating a preset transaction, monitoring the first execution time of each operation in the execution process of the preset transaction, and sending the first execution time to the analysis server;
the screen recording camera is used for uninterruptedly recording a display picture of a preset transaction execution process automatically simulated by the automatic transaction server to obtain a first screen recording picture, and sending the first screen recording picture to the analysis early warning server;
the analysis server is used for analyzing the received first operation data of the preset transaction, determining whether the first operation data is abnormal data, and if the first operation data is abnormal data, sending the first operation data to the early warning center server; the first operation data of the preset transaction comprises: a first screen recording picture and/or a first transaction time; the early warning center server is used for receiving abnormal first operation data, analyzing the reason of the transaction abnormality and determining early warning measures according to the reason of the abnormality.
Optionally, the analysis server includes:
a time signal analysis server and a screen recording picture analysis server;
the time signal analysis server is used for receiving a first execution time of the automatic transaction server for automatically simulating a preset transaction, judging whether the first execution time is abnormal or not and sending the abnormal first execution time to the early warning center server;
and the screen recording picture analysis server is used for receiving the first screen recording picture, judging whether the first screen recording picture is abnormal or not and sending the abnormal first screen recording picture to the early warning center server.
Optionally, the time signal analysis server is specifically configured to:
judging whether the first execution time exceeds a preset time threshold value or not, and sending the first execution time exceeding the preset time threshold value to the early warning center server;
optionally, the screen recording picture analysis server is configured to:
and judging whether the first screen recording picture is consistent with the pre-stored operation picture of the preset transaction or not, and sending the first screen recording picture inconsistent with the pre-stored operation picture of the preset transaction to the early warning center server.
Optionally, the method further includes:
the monitoring terminal is used for acquiring second operation data in the execution process of executing a preset transaction by a preset user and sending the second operation data to the analysis server so that the analysis server analyzes the received second operation data to determine whether the second operation data is abnormal data or not, if the second operation data is abnormal data, the second operation data is sent to the early warning center server, and the early warning center server analyzes the reason that the second operation data is abnormal data and determines corresponding early warning measures according to the reason that the second operation data is abnormal data; the second operation data includes: and the second screen recording picture recorded in the process of executing the preset transaction by the user and/or the second execution time of each operation monitored in the process of executing the preset transaction by the user.
Optionally, the analysis server is further configured to:
and sending the first operation data without abnormality or the second operation data without abnormality to an early warning center server, so that the early warning center server stores the first operation data or the second operation data for a preset time length.
Optionally, the early warning center server is further configured to:
when abnormal operation exists in the first operation data, second operation data related to first target transaction are called, and the reason of the abnormal operation of the first operation is determined according to the abnormal condition of the second operation data; the target transaction is a transaction performed to generate the first operational data;
or alternatively
And when the second operation data is abnormal, calling first operation data related to a second target transaction, and determining the reason of the second operation according to the abnormal condition of the first operation data.
The embodiment of the invention also discloses an early warning method, which is applied to the early warning system and comprises the following steps:
continuously and automatically simulating a preset transaction;
monitoring operational data during the process of simulating the preset transaction; the operational data includes: simulating a first execution time of each operation in a preset transaction process and simulating a first screen recording picture recorded in the preset transaction process;
judging whether the operation data is abnormal data or not;
if the operation data are abnormal data, analyzing the reason that the first operation data are abnormal data;
and determining corresponding early warning measures according to the reason that the first operation data is abnormal data.
Optionally, the method further includes:
acquiring second operation data of a user in the process of executing a preset transaction; the second operation data includes: executing a second execution time of each operation in a preset transaction process by the user and executing a second screen recording picture recorded in the preset transaction process by the user;
judging whether the second operation data is abnormal data or not;
if the second operation data are abnormal data, analyzing the reason that the second operation data are abnormal data;
and determining corresponding early warning measures according to the reason that the second operation data is abnormal data.
Optionally, the method further includes:
when abnormal operation exists in the first operation data, second operation data related to first target transaction is called, and the reason of the abnormal operation of the first operation is determined according to the abnormal condition of the second operation data; the target transaction is a transaction performed to generate the first operational data;
or
And when the second operation data is abnormal, calling first operation data related to a second target transaction, and determining the reason of the second operation according to the abnormal condition of the first operation data.
The embodiment of the invention discloses an early warning system and a method, wherein the system comprises: the automatic transaction server is used for uninterruptedly and automatically simulating a preset transaction, monitoring the first execution time of each operation in the execution process of the preset transaction and sending the first execution time to the analysis server; the screen recording camera is used for uninterruptedly recording a display picture of a preset transaction execution process automatically simulated by the automatic transaction server to obtain a first screen recording picture, and sending the first screen recording picture to the analysis server; the analysis server is used for analyzing the received first operation data of the preset transaction, determining whether the first operation data is abnormal data, and if the first operation data is abnormal data, sending the first operation data to the early warning center server; the first operation data of the preset transaction comprises: a first screen recording picture and/or a first transaction time; and the early warning center server is used for receiving the abnormal first operation data, analyzing the reason of the abnormal transaction and determining early warning measures according to the reason of the abnormal transaction. Therefore, the early warning method of the transaction system is realized, the abnormal condition can be known in real time, and the corresponding early warning measure can be determined.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the provided drawings without creative efforts.
Fig. 1 shows a schematic structural diagram of an early warning system according to an embodiment of the present invention;
FIG. 2 is a further schematic diagram of an early warning system provided by an embodiment of the invention;
fig. 3 is another schematic structural diagram of an early warning system according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of a monitoring terminal according to an embodiment of the present invention;
fig. 5 is a schematic flow chart illustrating an early warning method according to an embodiment of the present invention;
fig. 6 is a schematic flow chart of an early warning method according to an embodiment of the present invention.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Referring to fig. 1, a schematic structural diagram of an early warning system according to an embodiment of the present invention is shown, in this embodiment, the system includes:
the system comprises an automatic transaction server 100, a screen recording camera 200, an analysis server 300 and an early warning center server 400;
the automatic transaction server 100 is configured to continuously and automatically simulate a preset transaction, monitor a first execution time of each operation in an execution process of the preset transaction, and send the first execution time to the analysis server;
wherein the automated transaction server 100 may automatically invoke a transaction and execute it automatically. For example: the automatic transaction server can adopt a Selenium Webdriver tool, automatically call up a certain transaction according to a pre-stored script, automatically open a transaction page, automatically fill a form, automatically click to send and the like.
In this embodiment, the execution of each transaction includes a plurality of operation processes, for example, for a balance inquiry transaction, the operation processes may include: opening a page, inputting identity information, clicking a query button, popping up a balance interface and the like, wherein the execution time of each operation needs to be recorded.
The screen recording camera 200 is configured to record a display picture of a preset transaction execution process automatically simulated by the automatic transaction server 100 without interruption to obtain a first screen recording picture, and send the first screen recording picture to the analysis and early warning server;
for example, the following steps are carried out: when each transaction is simulated and operated on the financial transaction system, an operation interface after each operation is executed appears on the display equipment in the operation execution process, and the screen recording camera can record the operation interface appearing on the display equipment to obtain a screen recording picture operated in the transaction execution process.
The analysis server 300 is configured to analyze received first operation data of a preset transaction, determine whether the first operation data is abnormal data, and send the first operation data to the early warning center server if the first operation data is abnormal data; the first operation data of the preset transaction comprises: a first screen recording picture and/or a first transaction time;
the early warning center server 400 is configured to receive the abnormal first operation data, analyze a reason why the transaction is abnormal, and determine an early warning measure according to the reason of the abnormality.
In this embodiment, when different users operate a certain transaction, different situations need to be simulated due to different plug-ins installed on the client, or due to different regional network situations and different reasons for generating abnormal situations. Thus, in this embodiment, different transaction servers may simulate different transaction environments and different network environments, and specifically, the different transaction servers include different transaction environments and/or are in different network environments.
Wherein different transaction environments may be represented as the execution environment of the transaction, such as: different running plug-ins, different browsers, etc. Different network environments may represent network conditions under which transactions are run, e.g., network conditions may differ from region to region, and thus the automated transaction servers may be distributed to different regions.
In the embodiment, the execution process of the transaction is continuously and automatically simulated through the automatic transaction server, the transaction process is continuously and automatically executed, the operation data in the transaction process is recorded and sent to the analysis server, the analysis server analyzes whether the operation data is abnormal data or not, if the operation data is abnormal data, the abnormal operation data is sent to the early warning center server, and then the abnormal reason and the early warning measure are determined. Therefore, the early warning method of the transaction system is realized, the abnormal condition can be known in time, and corresponding early warning measures can be taken.
Example two:
referring to fig. 2, the analysis server 300 includes:
a time signal analysis server 301 and a screen recording picture analysis server 302;
the time signal analysis server 301 is configured to receive a first execution time for the automatic transaction server 100 to automatically simulate a preset transaction, determine whether the first execution time is abnormal, and send the abnormal first execution time to the early warning center server;
and the screen recording picture analysis server 302 is configured to receive the first screen recording picture, determine whether the first screen recording picture is abnormal, and send the abnormal first screen recording picture to the early warning center server.
In this embodiment, the method for determining whether the first execution time is related to the abnormal condition may include multiple methods, and in this embodiment, the method is not limited, for example, by determining whether the first execution time is greater than a certain threshold, specifically, the time signal receiving server 200 is configured to:
and judging whether the first execution time exceeds a corresponding time threshold value or not, and sending the first execution time exceeding the corresponding time threshold value to the early warning center server.
It should be noted that, since each transaction includes a plurality of operations, each operation corresponds to an execution time, and the time threshold corresponding to each execution time may be the same or different.
For example, the following steps are carried out: when executing the query transaction, the method comprises the following steps: inputting an account and a password, responding to the account and the password, displaying a query interface operation, and the like. The early warning system will monitor the execution time of each operation of the transaction, wherein, for example: execution time may be understood as the time from the start of the jump to the associated interface to the user determining that execution is complete.
In this embodiment, for the analysis of the first screen recording picture, for example, the first screen recording picture generated by simulating the transaction may be analyzed according to a picture generated by normal operation of the transaction, and specifically, the screen recording picture analysis server 302 is specifically configured to:
and judging whether the first screen recording picture is consistent with the pre-stored operation picture of the preset transaction or not, and sending the first screen recording picture inconsistent with the pre-stored operation picture of the preset transaction to the early warning center server.
When the user analyzes the screen recording picture, the user may use a plurality of image processing methods, which are not limited in this embodiment, and for example, a graphic analysis method such as edge detection may be used.
In this embodiment, after the time signal analysis server 301 or the screen recording picture analysis server 302 analyzes the abnormality, the first execution time of the abnormality or the first abnormal picture of the abnormality is sent to the central early warning server 400, so that the central early warning server analyzes the cause of the abnormality.
In this embodiment, the automatic transaction server continuously and automatically simulates an execution process of a transaction, continuously and automatically executes the transaction process, records a first execution time and a first screen recording picture in the transaction process, and sends the first execution time and the first screen recording picture to the analysis server, and the analysis server analyzes the execution time and the display picture, and sends an abnormal first execution time and an abnormal first screen recording picture to the early warning center server, so as to determine an abnormal reason and an early warning measure. Therefore, the early warning method of the transaction system is realized, the abnormal condition can be known in time, and corresponding early warning measures can be taken.
Example three:
for the situations of delay or error, including many reasons, which may be caused by transaction system or network reasons, these situations may be detected by an automatic simulation method, but also may be caused by a large habit of a user, and this situation cannot be detected by the automatic simulation method, therefore, in order to obtain a more accurate abnormality reason, in this embodiment, the usage habit and the execution process of some sampling users are monitored, specifically, referring to fig. 3, the structure of the early warning system may further include:
the monitoring terminal 500 is used for collecting second operation data in the execution process of executing a preset transaction by a preset user and sending the second operation data to the analysis server; the second operation data includes: and the second screen recording picture recorded in the process of executing the preset transaction by the user and/or the second execution time monitored in the process of executing the preset transaction by the user.
Wherein, referring to fig. 4, the monitoring terminal 500 may include: a second execution time monitoring module 501 and a screen recording device 502;
the second execution time monitoring module 501 is configured to monitor a second execution time of each operation performed by the user in the preset transaction process;
the screen recording device 502 is configured to record a second screen recording picture in a process of executing a preset transaction by a user.
The analysis server 300 is configured to, after receiving second operation data, analyze the received second operation data to determine whether the second operation data is abnormal data, and if the second operation data is abnormal data, send the second operation data to the early warning center server 400;
the early warning center server 400 is configured to analyze the reason that the second operation data is abnormal data, and determine a corresponding early warning measure according to the reason that the second operation data is abnormal data. In this embodiment, the method for determining whether the second execution time is equal to or less than the abnormal condition may include multiple methods, and in this embodiment, the method is not limited, for example, by determining whether the second execution time is greater than a certain threshold, specifically, the method includes:
and judging whether the second execution time exceeds a preset time threshold, and if the second execution time exceeds the preset time threshold, indicating that the second execution time is abnormal data.
It should be noted that, since each transaction includes a plurality of operations, each operation corresponds to an execution time, and the time threshold corresponding to each execution time may be the same or different.
For example, the following steps are carried out: when executing the query transaction, the method comprises the following steps: inputting an account and a password, responding to the account and the password, displaying a query interface operation, and the like. The early warning system will monitor the execution time of each operation of the transaction, wherein, for example: execution time may be understood as the time from the start of the jump to the associated interface to the user determining that execution is complete.
In this embodiment, for the analysis of the first screen recording picture, for example, the first screen recording picture generated by simulating the transaction may be analyzed according to a picture generated by normal operation of the transaction, and specifically, the screen recording picture analysis server 302 is specifically configured to:
and judging whether the first screen recording picture is consistent with the pre-stored operation picture of the preset transaction or not, and sending the first screen recording picture inconsistent with the pre-stored operation picture of the preset transaction to the early warning center server.
When the user analyzes the screen recording picture, the user may use a plurality of image processing methods, which are not limited in this embodiment, and for example, a graphic analysis method such as edge detection may be used.
In this embodiment, the second screen recording picture is obtained by monitoring the manual use habit, and the second screen recording picture is analyzed, so that the abnormal situation caused by the use habit of the user can be monitored, and further more accurate early warning measures can be obtained.
Example four
In this embodiment, there are many reasons for causing the abnormal condition of the first operation data or the second operation data, which may be problems of an operating system, a network, and a user operation, where the operating system problem belongs to a common problem, and the problem of the network good user operation does not belong to a common problem, which may be expressed as a problem of individuality; for the common problem, for example, if the operating system in a certain region has a problem, abnormal operation data can be generated no matter the transaction is automatically simulated or the transaction is executed by a user; however, for the problem of personality, there is a large gap between the operation data obtained by automatic simulation and the operation data obtained by user. Therefore, in order to obtain a more accurate cause of the abnormal situation, the central early warning server may perform cross validation on the first operation data generated by the automatic simulation and the second operation data of the sample user, specifically, the central early warning server is further configured to:
when abnormal operation exists in the first operation data, second operation data related to first target transaction is called, and the reason of the abnormal operation of the first operation is determined according to the abnormal condition of the second operation data; the target transaction is a transaction performed to generate the first operational data;
or
And when the second operation data is abnormal, calling first operation data related to a second target transaction, and determining the reason of the second operation according to the abnormal condition of the first operation data.
In the case that there is an abnormal operation in the automatically simulation generated first operation data, the second operation data related to the first target transaction that is called needs to meet a certain condition, specifically, the condition may include:
the invoked second operational data related to the first target transaction is first expressed as second target operational data, wherein the time of generation of the second target operational data is consistent with the time of generation of the first operational data, the consistency is not necessarily completely the same, and may be different by a preset time interval, and the invoked data should be in the same jurisdiction, for example, if the first operational data is Weifang district generated data, the second target operational data should also be Weifang district generated data.
Correspondingly, in the case that there is an abnormal operation in the collected second operation data generated by the user operation, the above condition is also required to be met by calling the first operation data related to the second target transaction, that is: first, the invoked first operation data related to the second target transaction is expressed as first target operation data, wherein the time of generation of the first target operation data and the time of generation of the second operation data are consistent, the consistency is not necessarily completely identical, and may be different by a preset time interval, and the invoked data should be local, for example, if the second operation data is the data generated by the Weiatio district, the first target operation data should also be the data generated by the Weiatio district.
Referring to fig. 5, a schematic flow chart of an early warning method provided in an embodiment of the present invention is shown, where in the embodiment, the method includes:
s501: continuously and automatically simulating a preset transaction;
s502: monitoring operational data during the process of simulating the preset transaction; the operational data includes: simulating a first execution time of each operation in a preset transaction process and simulating a first screen recording picture recorded in the preset transaction process;
s503: judging whether the operation data is abnormal data or not;
s504: if the operation data are abnormal data, analyzing the reason that the first operation data are abnormal data;
s505: and determining corresponding early warning measures according to the reason that the first operation data is abnormal data.
The determination of the abnormal condition may be performed by various methods, and in the present embodiment, the method is not limited, and includes, for example, the following two methods:
the method I comprises the following steps:
judging whether the first execution time exceeds a preset time threshold value or not;
and if the time exceeds the preset time threshold, indicating that the abnormal condition of the hysteresis occurs.
The second method comprises the following steps:
judging whether the first screen recording picture is consistent with a pre-stored display picture or not;
if not, the abnormal condition of execution error is shown.
In this embodiment, the simulation of the transaction may be performed in different transaction environments or different network environments.
Wherein different transaction environments may be represented as the execution environment of the transaction, such as: different running plug-ins, different browsers, etc. Different network environments may represent network conditions under which transactions operate.
In this embodiment, the automatic transaction server continuously and automatically simulates the preset transaction, monitors the first execution time of each operation in the execution process of the preset transaction, and sends the first execution time to the time signal receiving server; the time signal receiving server receives the first execution time, judges whether the first execution time is abnormal or not, and sends the abnormal first execution time to the early warning center server; in the execution process of the transaction, a screen recording camera is required to record a display picture of the execution process of the preset transaction continuously to obtain first screen recording information, and the first screen recording information is sent to the analysis early warning server. The analysis early warning server receives the first screen recording picture, judges whether the first screen recording picture is abnormal or not, and sends the abnormal screen recording picture to the early warning center server; and the early warning center server analyzes the received abnormal first execution time and/or the abnormal first screen recording picture, determines the reason of the abnormality and determines early warning measures according to the reason of the abnormality.
In this embodiment, for the occurrence of a delay or an error, it may be caused by a habit of a user, so to obtain a more accurate cause of an abnormality, in this embodiment, the usage habit and the execution process of some sampling users are monitored, specifically, referring to fig. 6, further including:
s601, collecting second operation data of a user in the process of executing the preset transaction; the second operation data includes: executing a second execution time of each operation in a preset transaction process by the user and executing a second screen recording picture recorded in the preset transaction process by the user;
s602, judging whether the second operation data is abnormal data;
s603, if the second operation data is abnormal data, analyzing the reason that the second operation data is abnormal data;
s604, determining corresponding early warning measures according to the reason that the second operation data is abnormal data.
In this embodiment, the second screen recording picture is obtained by monitoring the manual use habit, and the second screen recording picture is analyzed, so that the abnormal situation caused by the use habit of the user can be monitored, and further more accurate early warning measures can be obtained.
In this embodiment, there are many reasons for causing the abnormal condition of the first operation data or the second operation data, which may be problems of an operating system, a network, and a user operation, where the operating system problem belongs to a common problem, and the problem of the network good user operation does not belong to a common problem, which may be expressed as a problem of individuality; for the common problem, for example, if an operating system in a certain region has a problem, abnormal operation data is generated no matter the transaction is automatically simulated or the transaction is executed by a user; however, for the problem of personality, there is a large gap between the operation data obtained by automatic simulation and the operation data obtained by user. Therefore, in order to obtain a more accurate cause of the abnormal condition, the following steps can be used to verify:
when abnormal operation exists in the first operation data, second operation data related to first target transaction is called, and the reason of the abnormal operation of the first operation is determined according to the abnormal condition of the second operation data; the target transaction is a transaction performed to generate the first operational data;
or
And when the second operation data is abnormal, calling first operation data related to a second target transaction, and determining the reason of the second operation according to the abnormal condition of the first operation data.
In the case that there is an abnormal operation in the automatically simulation generated first operation data, the second operation data related to the first target transaction that is called needs to meet a certain condition, specifically, the condition may include:
the invoked second operational data associated with the first target transaction is first represented as second target operational data, wherein the time of generation of the second target operational data is consistent with the time of generation of the first operational data, the consistency is not necessarily exactly the same, and may be different by a preset time interval, and the invoked should be endemic, for example, if the first operational data is Weiatient-based data, the second target operational data should also be Weiatient-based data.
Correspondingly, in the case that there is an abnormal operation in the collected second operation data generated by the user operation, the above condition is also required to be met by calling the first operation data related to the second target transaction, that is: first, the invoked first operation data related to the second target transaction is expressed as first target operation data, wherein the time of generation of the first target operation data and the time of generation of the second operation data are consistent, the consistency is not necessarily completely identical, and may be different by a preset time interval, and the invoked data should be local, for example, if the second operation data is the data generated by the Weiatio district, the first target operation data should also be the data generated by the Weiatio district.
In this embodiment, through the cross validation, a more accurate cause of the abnormality can be obtained.
It should be noted that, in the present specification, the embodiments are all described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments may be referred to each other.
The previous description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (5)

1. An early warning system, comprising:
the system comprises an automatic transaction server, a screen recording camera, an analysis server, an early warning center server and a monitoring terminal;
the automatic transaction server is used for uninterruptedly and automatically simulating a preset transaction, monitoring the first execution time of each operation in the execution process of the preset transaction, and sending the first execution time to the analysis server;
the screen recording camera is used for uninterruptedly recording a display picture of an execution process of a preset transaction automatically simulated by the automatic transaction server to obtain a first screen recording picture, and sending the first screen recording picture to the analysis server;
the analysis server is used for analyzing the received first operation data of the preset transaction, determining whether the first operation data is abnormal data, and if the first operation data is abnormal data, sending the first operation data to the early warning center server; the first operation data of the preset transaction comprises: a first screen recording picture and/or a first transaction time; the early warning center server is used for receiving abnormal first operation data, analyzing the reason of the abnormality of the preset transaction and determining early warning measures according to the reason of the abnormality;
the monitoring terminal is used for acquiring second operation data in the execution process of executing a preset transaction by a preset user and sending the second operation data to the analysis server so that the analysis server analyzes the received second operation data to determine whether the second operation data is abnormal data or not, if the second operation data is abnormal data, the second operation data is sent to the early warning center server, and the early warning center server analyzes the reason that the second operation data is abnormal data and determines corresponding early warning measures according to the reason that the second operation data is abnormal data; the second operation data includes: a second screen recording picture recorded in the process of executing the preset transaction by the user and/or a second execution time of each operation monitored in the process of executing the preset transaction by the user;
wherein the analysis server is further configured to:
sending the first operation data without abnormity or the second operation data without abnormity to an early warning center server, so that the early warning center server stores the first operation data or the second operation data for a preset time length;
the early warning center server is also used for:
when abnormal operation exists in the first operation data, second operation data related to first target transaction is called, and the reason of the abnormal operation of the first operation is determined according to the abnormal condition of the second operation data; the target transaction is a transaction performed to generate the first operational data;
or
And when the second operation data is abnormal, calling first operation data related to a second target transaction, and determining the reason of the second operation data according to the abnormal condition of the first operation data.
2. The warning system of claim 1, wherein the analysis server comprises:
a time signal analysis server and a screen recording picture analysis server;
the time signal analysis server is used for receiving a first execution time of the automatic transaction server for automatically simulating a preset transaction, judging whether the first execution time is abnormal or not and sending the abnormal first execution time to the early warning center server;
and the screen recording picture analysis server is used for receiving the first screen recording picture, judging whether the first screen recording picture is abnormal or not and sending the abnormal first screen recording picture to the early warning center server.
3. The warning system of claim 2, wherein the time signal analysis server is specifically configured to:
and judging whether the first execution time exceeds a preset time threshold value or not, and sending the first execution time exceeding the preset time threshold value to the early warning center server.
4. The warning system of claim 2, wherein the screen recording picture analysis server is configured to:
and judging whether the first screen recording picture is consistent with the pre-stored operation picture of the preset transaction or not, and sending the first screen recording picture inconsistent with the pre-stored operation picture of the preset transaction to the early warning center server.
5. An early warning method is applied to an early warning system and comprises the following steps:
continuously and automatically simulating a preset transaction;
monitoring first operational data during the course of simulating the pre-set transaction; the first operational data includes: simulating a first execution time of each operation in a preset transaction process and simulating a first screen recording picture recorded in the preset transaction process;
judging whether the first operation data is abnormal data;
if the first operation data are abnormal data, analyzing the reason that the first operation data are abnormal data;
determining corresponding early warning measures according to the reason that the first operation data are abnormal data;
acquiring second operation data of a user in the process of executing a preset transaction; the second operation data includes: executing a second execution time of each operation in a preset transaction process by the user and executing a second screen recording picture recorded in the preset transaction process by the user;
judging whether the second operation data is abnormal data or not;
if the second operation data are abnormal data, analyzing the reason that the second operation data are abnormal data;
determining corresponding early warning measures according to the reason that the second operation data are abnormal data;
when abnormal operation exists in the first operation data, second operation data related to first target transaction is called, and the reason of the abnormal operation of the first operation is determined according to the abnormal condition of the second operation data; the target transaction is a transaction performed to generate the first operational data;
or
And when the second operation data is abnormal, calling first operation data related to a second target transaction, and determining the reason of the second operation data according to the abnormal condition of the first operation data.
CN201811285176.0A 2018-10-31 2018-10-31 Early warning system and method Active CN109284221B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201811285176.0A CN109284221B (en) 2018-10-31 2018-10-31 Early warning system and method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201811285176.0A CN109284221B (en) 2018-10-31 2018-10-31 Early warning system and method

Publications (2)

Publication Number Publication Date
CN109284221A CN109284221A (en) 2019-01-29
CN109284221B true CN109284221B (en) 2022-06-03

Family

ID=65174609

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201811285176.0A Active CN109284221B (en) 2018-10-31 2018-10-31 Early warning system and method

Country Status (1)

Country Link
CN (1) CN109284221B (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110225196B (en) * 2019-05-30 2021-01-26 维沃移动通信有限公司 Terminal control method and terminal equipment
CN110519558A (en) * 2019-07-19 2019-11-29 苏州浪潮智能科技有限公司 The processing method and its Baseboard Management Controller of video data
CN113596402A (en) * 2021-07-29 2021-11-02 上海浦东发展银行股份有限公司 In-service monitoring method, device, equipment, system and storage medium

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105589783A (en) * 2014-11-18 2016-05-18 广州市动景计算机科技有限公司 Application program lag problem data obtaining method and device
CN105913088A (en) * 2016-04-13 2016-08-31 厦门美图移动科技有限公司 Lag identification method, lag identification device and computing equipment
CN106297130A (en) * 2016-08-22 2017-01-04 国家电网公司 Transmission line of electricity video analysis early warning system

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10230820B2 (en) * 2017-04-12 2019-03-12 Wyse Technology L.L.C. Analytics driven update notification

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105589783A (en) * 2014-11-18 2016-05-18 广州市动景计算机科技有限公司 Application program lag problem data obtaining method and device
CN105913088A (en) * 2016-04-13 2016-08-31 厦门美图移动科技有限公司 Lag identification method, lag identification device and computing equipment
CN106297130A (en) * 2016-08-22 2017-01-04 国家电网公司 Transmission line of electricity video analysis early warning system

Also Published As

Publication number Publication date
CN109284221A (en) 2019-01-29

Similar Documents

Publication Publication Date Title
US6973415B1 (en) System and method for monitoring and modeling system performance
Bodik et al. Combining visualization and statistical analysis to improve operator confidence and efficiency for failure detection and localization
US7082381B1 (en) Method for performance monitoring and modeling
CN109284221B (en) Early warning system and method
US7496795B2 (en) Method, system, and computer program product for light weight memory leak detection
US10031831B2 (en) Detecting causes of performance regression to adjust data systems
US10657036B2 (en) Determining visual testing coverages
US20090158189A1 (en) Predictive monitoring dashboard
US20080307269A1 (en) Resolution of Computer Operations Problems Using Fault Trend Analysis
US20160224400A1 (en) Automatic root cause analysis for distributed business transaction
US20130080634A1 (en) End User Performance Monitoring For Mobile Applications
US7197428B1 (en) Method for performance monitoring and modeling
US20210133076A1 (en) System and method for detecting anomalies based on feature signature of task workflows
JP5454363B2 (en) Analysis program, analysis apparatus, and analysis method
EP2560099A1 (en) Efficiently collecting transaction-separated metrics in a distributed environment
JP2018028783A (en) System state visualization program, system state visualization method, and system state visualization device
US7369967B1 (en) System and method for monitoring and modeling system performance
WO2007052327A1 (en) Performance failure analysis device, method, program, and performance failure analysis device analysis result display method
US20180095819A1 (en) Incident analysis program, incident analysis method, information processing device, service identification program, service identification method, and service identification device
US7539904B2 (en) Quantitative measurement of the autonomic capabilities of computing systems
US20230388328A1 (en) Threat detection network
CN115292163A (en) Application program detection method and device and computer readable storage medium
Bhattacharyya et al. Semantic aware online detection of resource anomalies on the cloud
CN116324728A (en) Auxiliary detection of application performance problems using server-less computing templates
CN115840686A (en) Server performance test method and device, electronic equipment and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant