CN111935646A - Method and system for estimating common address of mobile equipment user - Google Patents
Method and system for estimating common address of mobile equipment user Download PDFInfo
- Publication number
- CN111935646A CN111935646A CN202010709723.4A CN202010709723A CN111935646A CN 111935646 A CN111935646 A CN 111935646A CN 202010709723 A CN202010709723 A CN 202010709723A CN 111935646 A CN111935646 A CN 111935646A
- Authority
- CN
- China
- Prior art keywords
- matrix
- city
- equipment
- address
- frequency
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 31
- 239000011159 matrix material Substances 0.000 claims description 95
- 238000012545 processing Methods 0.000 claims description 36
- 230000002159 abnormal effect Effects 0.000 abstract description 14
- 230000009286 beneficial effect Effects 0.000 abstract 1
- 230000006399 behavior Effects 0.000 description 8
- 230000000694 effects Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000010586 diagram Methods 0.000 description 1
- 238000013507 mapping Methods 0.000 description 1
- 230000008092 positive effect Effects 0.000 description 1
- 230000002035 prolonged effect Effects 0.000 description 1
- 238000012795 verification Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
- H04W4/02—Services making use of location information
- H04W4/029—Location-based management or tracking services
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
- H04L63/1425—Traffic logging, e.g. anomaly detection
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2101/00—Indexing scheme associated with group H04L61/00
- H04L2101/60—Types of network addresses
- H04L2101/69—Types of network addresses using geographic information, e.g. room number
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
- H04L63/107—Network architectures or network communication protocols for network security for controlling access to devices or network resources wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Mobile Radio Communication Systems (AREA)
- Telephonic Communication Services (AREA)
Abstract
The invention relates to the technical field of abnormal flow identification, in particular to a method and a system for estimating a common address of a mobile equipment user. The method comprises the following steps: s1: resolving the address of the equipment from the IP address to obtain the corresponding frequency relation between the equipment and each city, and obtaining a correlation coefficient between the equipment i and the city j through calculation; s2: and judging whether the city j is the common address of the equipment i or not according to the correlation coefficient between the equipment i and the city j. The invention has the beneficial effects that: because the user behavior attribute is described, the individual difference of each user is considered, and the misjudgment is avoided to a certain extent; because the common address is used as the characteristic for identifying the abnormal flow, the data of the address where the equipment is located can be judged to be easy to obtain from the exposure or the click record of each user behavior, and the method is convenient to popularize to different scenes.
Description
Technical Field
The invention relates to the technical field of abnormal flow identification, in particular to a method and a system for estimating a common address of a mobile equipment user.
Background
The identification of abnormal traffic usually depends on the advertisement exposure click frequency, the IP address correlation quantity and the like in a certain time period, the traffic credibility score is calculated through a rule, and then the abnormal traffic is judged according to a threshold value. The device IP corresponding to the traffic is an important characteristic for measuring the traffic effectiveness, and the geographic position of the device activity can be analyzed through the IP, so that whether the device appears at the geographic position where the device activity is impossible is judged.
In the prior art, the flow judgment rule based on the IP address is generally adopted, the threshold value of the time window is manually selected according to the geographical positions of the equipment login for a few times, and then judgment is carried out.
The invention provides a method and a system for estimating a common address of a mobile equipment user according to the problems. The common address is judged by describing the behavior attribute of the user, and the abnormal flow can be judged by taking the common address as the characteristic.
Disclosure of Invention
The present invention provides a method and a system for estimating a common address of a mobile device user, aiming at the above existing technical problems.
In order to achieve the purpose, the invention provides the following technical scheme:
a method for estimating a common address of a user of a mobile device, comprising the steps of:
s1: resolving the address of the equipment from the IP address to obtain the corresponding frequency relation between the equipment and each city, and obtaining a correlation coefficient between the equipment i and the city j through calculation;
s2: and judging whether the city j is the common address of the equipment i or not according to the correlation coefficient between the equipment i and the city j.
Preferably, S1 specifically includes the following steps:
s11: resolving the address of the equipment according to the IP address in the advertisement exposure click record of the equipment, establishing a frequency matrix A with initialization dimensionality of (N, K) according to the corresponding frequency relation between the equipment i and the city j in a certain time period,
wherein each row of matrix A represents the frequency of device i in each city, each column represents the frequency of device j, AijRepresents the frequency of occurrence of device i in city j over a period of time;
s12: obtaining a stability coefficient of each device according to the frequency matrix A in S11;
s13: and determining a correlation coefficient matrix between each device and each city according to the frequency matrix A in S11 and the stability coefficient in S12 to obtain a correlation coefficient between the device i and the city j.
Preferably, S12 specifically includes:
and constructing an urban matrix B according to the frequency matrix A, and then calculating the inverse urbanization frequency of each device to serve as a stability coefficient of the device.
Preferably, S12 includes the steps of:
s121: according to the frequency matrix A, an indication function I () is utilized to obtain a city matrix B,
s122: adding and taking reciprocal of each row in the matrix B to obtain the inverse urbanization frequency of each device, namely the stability coefficient Si,
Preferably, when a (i, j) >0, B (i, j) ═ 1, otherwise, B (i, j) is zero,
preferably, S13 includes the following steps:
s131: normalizing the frequency matrix A in S11 to obtain a probability matrix,
s132: multiplying each row of the probability matrix obtained in S131 by the stability coefficient S of the corresponding device obtained in S122 in sequenceiTo obtain a matrix M of correlation coefficients,
wherein M isijRepresents the correlation coefficient between device i and city j, which represents the correlation between device and city j.
Preferably, the larger the corresponding correlation coefficient in the correlation coefficient matrix M is, the greater the correlation between the corresponding device and the city is, and the more likely it is to determine that the device is the common address.
Preferably, the step of S2 includes: combining the correlation coefficient matrix obtained in S132, and converting MijWhen compared with a threshold value k, when Mij>And k, judging the city j as the common address of the equipment i.
The invention also provides a system for estimating the common address of the mobile equipment user, which is based on the common address estimation system of the mobile equipment user and comprises the following components:
the data acquisition module is used for receiving the acquired IP address and outputting the address of the analyzed equipment;
the data processing module is used for receiving the address of the equipment output by the data acquisition module, processing the address and outputting a corresponding correlation coefficient matrix between each equipment and each city;
and the judging module is used for judging whether the city j is a common address for the equipment i or not according to the correlation coefficient matrix output by the data processing module.
Preferably, the data processing module specifically includes:
the first data processing module is used for receiving the address of the equipment output by the data acquisition module and outputting a frequency matrix A;
a second data processing module for receiving the frequency matrix A of the first data processing module and outputting a probability matrix
The third data processing module is used for receiving the frequency matrix A of the first data processing module, and outputting the stability coefficient of each device after constructing the city matrix B;
a fourth data processing module for receiving the probability matrix output by the second data processing moduleAnd the stability coefficient of each device output by the third data processing module, and outputting a correlation coefficient matrix M.
Compared with the prior art, the invention has the advantages and positive effects that:
the method and the system for estimating the common address of the mobile equipment user can be applied to the field of abnormal flow identification, and have the advantage of more accurately judging whether the common address is used or not.
1. Because the association between the equipment i and the city j is used as a label to depict the behavior attribute of the user, the individual difference of each user is considered, and the misjudgment is avoided to a certain extent.
2. Because the common address is used as the characteristic for identifying the abnormal flow, the data of the address where the equipment is located can be judged to be easy to obtain from the exposure or the click record of each user behavior, so that the method is convenient to popularize.
Drawings
FIG. 1 is a flow chart illustrating a method for estimating a common address of a mobile UE;
fig. 2 is a flowchart illustrating a step S1 in the method for estimating a general address of a mobile user equipment;
fig. 3 is a flowchart illustrating a step S12 in the method for estimating a general address of a mobile user equipment;
fig. 4 is a flowchart illustrating the step S13 in the method for estimating the general address of the mobile user equipment;
fig. 5 is a schematic diagram of a conventional address estimation system for a mobile user equipment.
Detailed Description
Hereinafter, embodiments of the present invention will be further described with reference to the accompanying drawings.
The invention provides a method for estimating a common address of a mobile equipment user, which more reasonably and effectively utilizes an IP address, obtains the common address of the equipment user according to the IP address, and describes user attributes by taking the common address as a label, wherein the user attributes can be used as the characteristics of abnormal flow identification.
The specific flow of the method for estimating the common address of the mobile device user is shown in fig. 1, and includes the following steps:
s1: resolving the address of the equipment from the IP address to obtain the corresponding frequency relation between the equipment and each city, and obtaining a correlation coefficient between the equipment i and the city j through calculation;
s2: and adjusting a threshold value according to a correlation coefficient between the equipment i and the city j, and judging whether the city j is a common address of the equipment i.
And describing user attributes for the labels by judging whether the city j is the common address of the equipment i or not as a characteristic for identifying abnormal flow. The individual difference of the equipment is considered, and the misjudgment is avoided to a certain extent. The frequency is the number of advertisement exposure clicks.
As shown in fig. 2, S1 specifically includes the following steps:
s11: resolving the address of the equipment according to the IP address in the advertisement exposure click record of the equipment, establishing a frequency matrix A with initialization dimensionality of (N, K) according to the corresponding frequency relation between the equipment i and the city j in a certain time period,
wherein each row of matrix A represents the frequency of device i in each city, each column represents the frequency of device j, AijRepresents the frequency of occurrence of device i in city j over a period of time;
when the more places the device appears, the more active the device i is, that is, if the device i appears in many places, the possibility that the common address of the user of the device i is a certain specific city is reduced, and this situation can be understood as that the device i often has cheating behaviors such as remote login and the like, or the user of the device i travels and travels throughout the year and the like.
In the method, a certain time period can be set to be one year or several years, the time period is prolonged, the attribute of the equipment is more conveniently depicted, and the misjudgment behavior caused by too short time period is avoided.
S12: obtaining a stability coefficient of each device according to the frequency matrix A in S11;
s13: and determining corresponding correlation coefficients between each device and each city according to the frequency matrix A in S11 and the stability coefficients in S12, so as to obtain the correlation coefficients between the device i and the city j.
As shown in fig. 3, S12 includes constructing a city matrix B from the frequency matrix a, and then calculating an inverse-urbanization frequency for each device as a stability factor for the device.
S12 specifically includes:
s121: according to the frequency matrix A, an indication function I () is utilized to obtain a city matrix B,
s122: add and invert for each row in matrix BNumber of each device, to obtain the inverse urbanization frequency of each device, i.e. the stability factor Si,
The individual difference of each device can be seen through the setting of the stability coefficient, the larger the stability coefficient is, the more stable the device is, and whether the address is commonly used or not is easier to judge.
Wherein the mapping rule of I (·) is that if the condition in parentheses is true, the indication function is equal to 1, otherwise equal to 0. In the method, when A (i, j) >0, B (i, j) ═ 1, otherwise, B (i, j) is zero.
As shown in fig. 4, S13 includes the following steps:
s131: normalizing the frequency matrix A in S11 to obtain a probability matrix,
s132: multiplying each row of the probability matrix obtained in S131 by the stability coefficient S of the corresponding device obtained in S122 in sequenceiTo obtain a matrix M of correlation coefficients,
wherein,Mijrepresents the correlation coefficient between device i and city j, which represents the correlation between device and city j.
The larger the corresponding correlation coefficient in the correlation coefficient matrix M is, the larger the correlation between the corresponding device and the city is, and the more likely it is that the device is determined to be a common address.
The step S2 specifically includes combining the correlation coefficient matrix M obtained in S132 with MijWhen compared with a threshold value k, when Mij>And k, judging the city j as the common address of the equipment i.
The invention also provides a system for estimating the common address of the mobile equipment user, and a method for estimating the common address based on the mobile equipment user comprises the following steps:
the data acquisition module is used for receiving the acquired IP address and outputting the analyzed address of the equipment;
the data processing module is used for receiving the address of the equipment output by the data acquisition module, processing the address and outputting corresponding correlation coefficients between each equipment and each city;
and the judging module is used for judging whether the city j is a common address for the equipment i or not according to the correlation coefficient output by the data processing module.
The data processing module specifically includes:
the first data processing module is used for receiving the address of the equipment output by the data acquisition module and outputting a frequency matrix A;
a second data processing module for receiving the frequency matrix A of the first data processing module and outputting a probability matrix
The third data processing module is used for receiving the frequency matrix A of the first data processing module, and outputting the stability coefficient of each device after constructing the city matrix B;
a fourth data processing module for receiving the probability matrix output by the second data processing moduleAnd the stability coefficient of each device output by the third data processing module, and outputting a correlation coefficient matrix M.
At present, identifying a common address of a device is generally applied to an application scenario of judging abnormal login, for example, a game manufacturer judges whether an account is stolen by using the device login address, and when login occurs in a different place, verification is started, so that the security of the game account can be protected to a certain extent.
The method can obtain the corresponding frequency matrix of the account and each login place according to the login address of the account in one year or several years, obtain the probability matrix, the city matrix and the stability coefficient matrix according to the corresponding frequency matrix, finally obtain the correlation coefficient matrix, judge the constant-live address of the account, and compare the constant-live address with the current login address, thereby judging whether the embezzlement behavior is performed.
The following is a specific description of the above method by taking an example in an actual application scenario: assume that there are four devices, five cities.
First, a frequency matrix A of (4,5) is established based on the frequencies of occurrence of five cities for a period of time by three devices,
in the above matrix, A31With 5 stands for 5 occurrences of the device 3 in city 1, a21The 9 represents that the device 2 appears 9 times in the city 1.
Secondly, according to the obtained frequency matrix A, constructing an urban matrix B according to a method of marking 1 at a position which is not zero in the matrix A,
thirdly, adding and taking reciprocal of each row in the city matrix B to obtain the stability coefficient S of the corresponding equipmenti,
From the above matrix, it can be seen that the stability factor of device 1 is 1, the stability factor of device 2 is 0.5, the stability factor of device 3 is 0.33, and the stability factor of device 4 is 0.2.
Then, each row of the frequency matrix A is normalized to obtain a probability matrix, the probability of each device appearing in different cities is shown,
in the above matrix, it can be seen that the probability of device 1 appearing in city 2 is 1, the probability of device 2 appearing in cities 1 and 2 is 0.9 and 0.1, the probability of device 3 appearing in cities 1, 2 and 3 is 0.5, 0.4 and 0.1, and the probability of device 4 appearing in 5 cities is 0.2. Finally, according to the obtained probability matrix and the stability coefficient of each device, multiplying each row of the probability matrix by the corresponding stability coefficient to obtain a correlation coefficient matrix,
in the above-mentioned correlation coefficient matrix, M111 represents a correlation coefficient of 1 between the device 1 and the city 1, M310.17 represents a correlation coefficient of 0.17 between the device 3 and the city 1.
The invention judges whether the address is a common address according to the threshold value, the selection of the threshold value is suitable for a specific scene, and the severity of the relation of the residential addresses is determined by the height of the threshold value. In general, it is reasonable to select the threshold value in the range of 0.1 to 0.3.
In the above embodiment, the correlation coefficient between the device 1 and the device 2 and the city 1 is relatively large, specifically, the correlation coefficient between the device 1 and the city 1 is 1, the correlation coefficient between the device 2 and the city 1 is 0.45, and within a reasonable threshold range, the permanent addresses of both the device 1 and the device 2 are determined as the city 1, and both the device 1 and the device 2 belong to relatively normal devices;
the device 3 is relatively active, the selection of the threshold value greatly affects the determination of the common address of the device 3, if the threshold value is set to 0.15, only the city 1 is determined as the common address of the device 3, if the threshold value is set to 0.1, the cities 1 and 2 are both determined as the common address of the device 3, the correlation coefficient between the device 3 and the city 3 is 0.03, and the correlation coefficient is small, generally speaking, when the correlation coefficient between the device and a certain city is low, the probability that abnormal traffic data occurs is increased for a monitor, so that the registration of the device 3 in the city 3 may be determined as abnormal registration, and the generated traffic data may be determined as abnormal traffic.
Device 4 is abnormally active and therefore device 4 should not have a commonly used address. This behavior was determined to be a more typical behavior of replacing I p brush counts based on the frequency of occurrence of the device 4 in 5 cities and the correlation coefficient.
The above description is only a preferred embodiment of the present invention, and not intended to limit the present invention in other forms, and any person skilled in the art may apply the above modifications or changes to the equivalent embodiments with equivalent changes, without departing from the technical spirit of the present invention, and any simple modification, equivalent change and change made to the above embodiments according to the technical spirit of the present invention still belong to the protection scope of the technical spirit of the present invention.
Claims (10)
1. A method for estimating a common address of a user of a mobile device, comprising the steps of:
s1: resolving the address of the equipment from the IP address to obtain the corresponding frequency relation between the equipment and each city, and obtaining a correlation coefficient between the equipment i and the city j through calculation;
s2: and judging whether the city j is the common address of the equipment i or not according to the correlation coefficient between the equipment i and the city j.
2. The method of claim 1, wherein the step S1 comprises the steps of:
s11: resolving the address of the equipment according to the IP address in the advertisement exposure click record of the equipment, establishing a frequency matrix A with initialization dimensionality of (N, K) according to the corresponding frequency relation between the equipment i and the city j in a certain time period,
wherein each row of matrix A represents the frequency of device i in each city, each column represents the frequency of device j, AijRepresents the frequency of occurrence of device i in city j over a period of time;
s12: obtaining a stability coefficient of each device according to the frequency matrix A in S11;
s13: and determining a correlation coefficient matrix between each device and each city according to the frequency matrix A in S11 and the stability coefficient in S12 to obtain a correlation coefficient between the device i and the city j.
3. The method of claim 2, wherein the step S12 specifically comprises:
and constructing an urban matrix B according to the frequency matrix A, and then calculating the inverse urbanization frequency of each device to serve as a stability coefficient of the device.
4. The method of any one of claims 2 or 3, wherein the step S12 comprises the steps of:
s121: according to the frequency matrix A, an indication function I () is utilized to obtain a city matrix B,
S122: adding and taking reciprocal of each row in the matrix B to obtain the inverse urbanization frequency of each device, namely the stability coefficient Si,
5. The method of claim 4, wherein when A (i, j) >0, then B (i, j) ═ 1, otherwise, B (i, j) is zero.
6. The method for estimating a common address of a user of a mobile device according to any one of claims 2, 3 and 5, wherein S13 comprises the following steps:
s131: normalizing the frequency matrix A in S11 to obtain a probability matrix,
s132: multiplying each row of the probability matrix obtained in S131 by the stability coefficient S of the corresponding device obtained in S122 in sequenceiTo obtain a matrix M of correlation coefficients,
wherein M isijRepresents the correlation coefficient between device i and city j, which represents the correlation between device and city j.
7. The method of claim 6, wherein the larger the correlation coefficient in the correlation coefficient matrix M, the more relevant the corresponding device is to the city, and the more likely it is to determine that the device is the popular address.
8. The method for estimating a common address of a user of a mobile device according to any one of claims 1 to 3, 5 and 7, wherein the step of S2 comprises: combining the correlation coefficient matrix obtained in S132, and converting MijWhen compared with a threshold value k, when Mij>And k, judging the city j as the common address of the equipment i.
9. A system for estimating a common address of a mobile device user according to any one of claims 1 to 8, comprising:
the data acquisition module is used for receiving the acquired IP address and outputting the address of the analyzed equipment;
the data processing module is used for receiving the address of the equipment output by the data acquisition module, processing the address and outputting a corresponding correlation coefficient matrix between each equipment and each city;
and the judging module is used for judging whether the city j is a common address for the equipment i or not according to the correlation coefficient matrix output by the data processing module.
10. The system of claim 9, wherein the data processing module comprises:
the first data processing module is used for receiving the address of the equipment output by the data acquisition module and outputting a frequency matrix A;
a second data processing module for receiving the frequency matrix A of the first data processing module and outputting a probability matrix
The third data processing module is used for receiving the frequency matrix A of the first data processing module, and outputting the stability coefficient of each device after constructing the city matrix B;
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202010709723.4A CN111935646B (en) | 2020-07-22 | 2020-07-22 | Method and system for estimating common address of mobile equipment user |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202010709723.4A CN111935646B (en) | 2020-07-22 | 2020-07-22 | Method and system for estimating common address of mobile equipment user |
Publications (2)
Publication Number | Publication Date |
---|---|
CN111935646A true CN111935646A (en) | 2020-11-13 |
CN111935646B CN111935646B (en) | 2022-09-20 |
Family
ID=73314319
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202010709723.4A Active CN111935646B (en) | 2020-07-22 | 2020-07-22 | Method and system for estimating common address of mobile equipment user |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN111935646B (en) |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20100151816A1 (en) * | 2008-12-16 | 2010-06-17 | Jan Besehanic | Methods and apparatus for associating media devices with a demographic composition of a geographic area |
CN107622065A (en) * | 2016-07-14 | 2018-01-23 | 腾讯科技(深圳)有限公司 | A kind of data processing method and server |
WO2018040944A1 (en) * | 2016-08-31 | 2018-03-08 | 阿里巴巴集团控股有限公司 | System, method, and device for identifying malicious address/malicious purchase order |
CN108446944A (en) * | 2018-02-05 | 2018-08-24 | 北京三快在线科技有限公司 | A kind of the determination method, apparatus and electronic equipment in resident city |
CN108521402A (en) * | 2018-03-07 | 2018-09-11 | 阿里巴巴集团控股有限公司 | A kind of method, apparatus and equipment of output label |
-
2020
- 2020-07-22 CN CN202010709723.4A patent/CN111935646B/en active Active
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20100151816A1 (en) * | 2008-12-16 | 2010-06-17 | Jan Besehanic | Methods and apparatus for associating media devices with a demographic composition of a geographic area |
CN107622065A (en) * | 2016-07-14 | 2018-01-23 | 腾讯科技(深圳)有限公司 | A kind of data processing method and server |
WO2018040944A1 (en) * | 2016-08-31 | 2018-03-08 | 阿里巴巴集团控股有限公司 | System, method, and device for identifying malicious address/malicious purchase order |
CN108446944A (en) * | 2018-02-05 | 2018-08-24 | 北京三快在线科技有限公司 | A kind of the determination method, apparatus and electronic equipment in resident city |
CN108521402A (en) * | 2018-03-07 | 2018-09-11 | 阿里巴巴集团控股有限公司 | A kind of method, apparatus and equipment of output label |
Also Published As
Publication number | Publication date |
---|---|
CN111935646B (en) | 2022-09-20 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US11373205B2 (en) | Identifying and punishing cheating terminals that generate inflated hit rates | |
CN109241461B (en) | User portrait construction method and device | |
US20150381490A1 (en) | Methods and apparatus to measure market statistics | |
CN112738102B (en) | Asset identification method, device, equipment and storage medium | |
CN108810806B (en) | Positioning information correction method, client, storage medium and equipment | |
WO2020232999A1 (en) | Information security-based positioning data monitoring method and related device | |
CN109302678B (en) | Method for early warning according to information of mobile terminals in address fence and electronic fence | |
CN109195219B (en) | Method for determining position of mobile terminal by server | |
CN112153070B (en) | Abnormality detection method, device, storage medium and apparatus for vehicle-mounted CAN bus | |
CN109670931B (en) | Loan user behavior detection method, loan user behavior detection device, loan user behavior detection equipment and loan user behavior detection storage medium | |
CN111935646B (en) | Method and system for estimating common address of mobile equipment user | |
WO2005083602A1 (en) | Method for measuring a variation in the total number of persons present in a geographical area | |
CN108734393A (en) | Matching process, user equipment, storage medium and the device of information of real estate | |
CN109587248B (en) | User identification method, device, server and storage medium | |
CN112667961A (en) | Method and system for identifying advertisement bullet screen publisher | |
CN110717179A (en) | Risk assessment method of IP address and related device | |
US11963128B2 (en) | Evaluating IP location on a client device | |
CN113807723B (en) | Risk identification method for knowledge graph | |
CN109600751B (en) | Pseudo base station detection method based on network side user data | |
CN109660503B (en) | Method, device, equipment and medium for analyzing abnormal use behavior of user terminal | |
CN110098983B (en) | Abnormal flow detection method and device | |
CN110569475A (en) | Evaluation method, device, equipment and storage medium for netizen influence | |
CN111800409A (en) | Interface attack detection method and device | |
CN112256814B (en) | Information acquisition method, electronic device, and computer-readable storage medium | |
US20240144300A1 (en) | Characteristic information generating apparatus, system, method, and computer-readable medium |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |