CN114826655A - Control method, device, equipment and storage medium for sliding time window - Google Patents

Control method, device, equipment and storage medium for sliding time window Download PDF

Info

Publication number
CN114826655A
CN114826655A CN202210238044.2A CN202210238044A CN114826655A CN 114826655 A CN114826655 A CN 114826655A CN 202210238044 A CN202210238044 A CN 202210238044A CN 114826655 A CN114826655 A CN 114826655A
Authority
CN
China
Prior art keywords
time window
time
sliding
sliding time
behavior data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202210238044.2A
Other languages
Chinese (zh)
Inventor
覃永靖
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Qax Technology Group Inc
Secworld Information Technology Beijing Co Ltd
Original Assignee
Qax Technology Group Inc
Secworld Information Technology Beijing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Qax Technology Group Inc, Secworld Information Technology Beijing Co Ltd filed Critical Qax Technology Group Inc
Priority to CN202210238044.2A priority Critical patent/CN114826655A/en
Publication of CN114826655A publication Critical patent/CN114826655A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Alarm Systems (AREA)

Abstract

The embodiment of the invention provides a method, a device, equipment and a storage medium for managing and controlling a sliding time window, wherein the method comprises the following steps: acquiring the generation time of first behavior data; determining the initial time of a sliding time window corresponding to the first behavior data according to the generation time of the first behavior data; determining at least one sliding time window corresponding to the first behavior data according to the initial time of the sliding time window and the configuration parameters of the sliding time window; the sliding time window is used for generating a behavior safety baseline corresponding to the first behavior data. The method of the embodiment of the invention realizes effective management and control of the sliding time window.

Description

Control method, device, equipment and storage medium for sliding time window
Technical Field
The present invention relates to the field of computer technologies, and in particular, to a method, an apparatus, a device, and a storage medium for managing and controlling a sliding time window.
Background
In recent years, with the rapid development of internet technology and the intellectualization of network devices, network security has become the key to information protection, data storage and use. The network user behavior has an important influence on the network security, and various network problems caused by the abnormal user behavior are more prominent than those caused at any time in the past.
In the related technology, abnormal behaviors are detected through a behavior safety baseline; the behavior safety baseline is generally obtained by taking a time period as a unit, namely, user behavior data is acquired and analyzed by taking the time period as a unit to generate a user behavior baseline; therefore, how to divide the real-time behavior data stream according to the time period to generate the user behavior baseline is a problem that needs to be paid much attention to by those skilled in the art.
Disclosure of Invention
To solve the problems in the prior art, embodiments of the present invention provide a method, an apparatus, a device, and a storage medium for managing and controlling a sliding time window.
Specifically, the embodiment of the invention provides the following technical scheme:
in a first aspect, an embodiment of the present invention provides a method for managing and controlling a sliding time window, including:
acquiring the generation time of first behavior data;
determining the initial time of a sliding time window corresponding to the first behavior data according to the generation time of the first behavior data;
determining at least one sliding time window corresponding to the first behavior data according to the initial time of the sliding time window and the configuration parameters of the sliding time window; the sliding time window is used for generating a behavior safety baseline corresponding to the first behavior data.
Further, the determining at least one sliding time window corresponding to the first behavior data according to the initial time of the sliding time window and the sliding time window configuration parameters includes:
determining the starting time and the ending time of each sliding time window according to the initial time of the sliding time window and the configuration parameters of the sliding time window;
and determining each sliding time window according to the starting time and the ending time of each sliding time window.
Further, the determining the start time and the end time of each sliding time window according to the initial time of the sliding time window and the sliding time window configuration parameters includes:
step a, determining first time according to the initial time of the sliding time window and the length of the time window in the sliding time window configuration parameters;
step b, when the initial time of the sliding time window is later than a first time, taking the initial time of the sliding time window as the starting time of the sliding time window, and determining the ending time of the sliding time window according to the starting time of the sliding time window and the length of the time window; and updating the initial time of the sliding time window according to the iteration step length of the sliding time window included by the configuration parameters of the sliding time window, and repeatedly executing the step b until the initial time of the sliding time window is not later than the first time.
Further, for any of the sliding time windows, determining whether the sliding time window is an active window;
and if so, determining whether the second behavior data is delayed behavior data relative to the sliding time window according to the generation time of the currently input second behavior data and the end time of the sliding time window.
Further, searching whether the sliding time window exists in the active window record information;
the method further comprises the following steps:
and if not, determining whether the second behavior data is delay behavior data relative to the sliding time window or not according to the generation time of the currently input second behavior data and the end time of the sliding time window.
Further, if the sliding time window does not exist in the active window record information, registering a first timer, and determining the trigger time of the first timer, wherein the trigger time of the first timer is determined according to the end time of the sliding time window or the closing time of the sliding time window; and/or the presence of a gas in the gas,
if the trigger time of the first timer and the end time of the sliding time window meet a first condition, updating the state of the sliding time window to a preparation state; and/or the presence of a gas in the gas,
if the trigger time of the first timer and the end time of the sliding time window do not meet the first condition, and the trigger time of the first timer and the closing time of the sliding time window meet a second condition, updating the state of the sliding time window to be in a closing state; and/or the presence of a gas in the gas,
and if the triggering time of the first timer and the ending time of the sliding time window do not meet the first condition, the triggering time of the first timer and the closing time of the sliding time window do not meet the second condition, and the triggering time of the first timer and the overtime of the sliding time window meet the third condition, updating the state of the sliding time window to be in an overtime state.
Further, according to the end time of each sliding time window and the sliding time window configuration parameters, determining the closing time and the overtime time of each sliding time window; the closing time is used for behavior data indicating when the sliding time window stops receiving input; the timeout time is used to represent a closing time after the sliding time window has timed out.
Further, if the generation time of the second behavior data and the end time of the sliding time window satisfy a fourth condition, the second behavior data is delay behavior data with respect to the sliding time window.
Further, if the generation time of the second behavior data is earlier than a second time, discarding the second behavior data; the second time is determined based on a generation time of the second behavior data and a delay time of the sliding time window.
In a second aspect, an embodiment of the present invention further provides a device for managing and controlling a sliding time window, including:
the acquisition module is used for acquiring the initial time of the first behavior data;
a determining module, configured to determine, according to the initial time of the first behavior data, a start time of a sliding time window corresponding to the first behavior data;
the management and control module is used for determining at least one sliding time window corresponding to the first behavior data according to the initial time of the sliding time window and the configuration parameters of the sliding time window; the sliding time window is used for generating a behavior safety baseline corresponding to the first behavior data.
In a third aspect, an embodiment of the present invention further provides an electronic device, including a memory, a processor, and a computer program stored on the memory and executable on the processor, where the processor implements the method for managing and controlling a sliding time window according to the first aspect when executing the program.
In a fourth aspect, an embodiment of the present invention further provides a non-transitory computer-readable storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements the method for managing a sliding time window according to the first aspect.
In a fifth aspect, an embodiment of the present invention further provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the method for managing and controlling a sliding time window according to the first aspect is implemented.
According to the control method, the control device, the control equipment and the storage medium for the sliding time window, provided by the embodiment of the invention, the starting time of the sliding time window corresponding to the first behavior data is determined through the generation time of the first behavior data; determining at least one sliding time window corresponding to the first behavior data according to the starting time of the sliding time window and the configuration parameters of the sliding time window; the method comprises the steps that a sliding time window corresponding to behavior data is accurately determined through generation time of first behavior data and sliding time window configuration parameters; furthermore, after the sliding time windows corresponding to the behavior data are determined, the dynamic change characteristics of the data corresponding to each sliding time window can be accurately analyzed, so that the generated behavior safety baseline contains richer and accurate user behavior characteristics, and the abnormal behavior can be accurately and effectively detected according to the generated behavior safety baseline; meanwhile, the sliding time window corresponding to the behavior data is accurately determined, the time accumulation effect of the behavior data is avoided, and the analysis and processing complexity of the behavior data is reduced.
Drawings
In order to more clearly illustrate the technical solutions of the present invention or the prior art, the drawings needed for the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and those skilled in the art can also obtain other drawings according to the drawings without creative efforts.
Fig. 1 is a schematic flowchart of a method for managing a sliding time window according to an embodiment of the present invention;
fig. 2 is a second flowchart illustrating a method for managing a sliding time window according to an embodiment of the present invention;
fig. 3 is a third schematic flowchart of a method for managing a sliding time window according to an embodiment of the present invention;
fig. 4 is a fourth flowchart illustrating a method for managing and controlling a sliding time window according to an embodiment of the present invention;
fig. 5 is a fifth flowchart illustrating a method for managing and controlling a sliding time window according to an embodiment of the present invention;
fig. 6 is a sixth flowchart illustrating a method for managing and controlling a sliding time window according to an embodiment of the present invention;
fig. 7 is a seventh flowchart illustrating a method for managing a sliding time window according to an embodiment of the present invention;
fig. 8 is a schematic structural diagram of a control device for sliding time windows according to an embodiment of the present invention;
fig. 9 is a schematic structural diagram of an electronic device according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention clearer, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings, and it is obvious that the described embodiments are some, but not all embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
The method of the embodiment of the invention realizes effective management and control of the sliding time window.
In the related technology, abnormal behaviors are detected through a behavior safety baseline; the behavior safety baseline is generally obtained by taking a time period as a unit, namely, user behavior data is acquired and analyzed by taking the time period as a unit to generate a user behavior baseline; therefore, how to divide the real-time behavior data stream according to the time period to generate the user behavior baseline is a problem that needs to be paid much attention to by those skilled in the art.
According to the control method of the sliding time window, the starting time of the sliding time window corresponding to the first behavior data is determined according to the generation time of the first behavior data; determining at least one sliding time window corresponding to the first behavior data according to the starting time of the sliding time window and the configuration parameters of the sliding time window; the method comprises the steps that a sliding time window corresponding to behavior data is accurately determined through generation time of first behavior data and sliding time window configuration parameters; furthermore, after the sliding time windows corresponding to the behavior data are determined, the dynamic change characteristics of the data corresponding to each sliding time window can be accurately analyzed, so that the generated behavior safety baseline contains richer and accurate user behavior characteristics, and the abnormal behavior can be accurately and effectively detected according to the generated behavior safety baseline; meanwhile, the sliding time window corresponding to the behavior data is accurately determined, the time accumulation effect of the behavior data is avoided, and the complexity of analyzing and processing the behavior data is reduced.
The technical solution of the present invention is described in detail with specific embodiments in conjunction with fig. 1-9. The following several specific embodiments may be combined with each other, and details of the same or similar concepts or processes may not be repeated in some embodiments.
Fig. 1 is a flowchart illustrating a method for managing a sliding time window according to an embodiment of the present invention. As shown in fig. 1, the method provided by this embodiment includes:
step 101, acquiring generation time of first behavior data;
specifically, the behavior safety baseline is usually obtained in units of time periods, that is, the user behavior data is acquired and analyzed in units of time periods, so as to generate the user behavior baseline. Therefore, in order to implement the detection of the abnormal behavior, the behavior data of the user and the generation time of the behavior data need to be acquired in the first step, and then the behavior security baseline can be generated and the abnormal behavior can be detected according to the acquired behavior data of the user and the generation time of the behavior data. Optionally, the obtained behavioural data comprises a real-time behavioural data stream.
102, determining initial time of a sliding time window corresponding to first behavior data according to the generation time of the first behavior data;
specifically, the behavior safety baseline is usually obtained by taking a time period as a unit, and therefore, the real-time behavior data stream needs to be divided according to the time period to generate the user behavior baseline; alternatively, the behavior data may be divided by time period by sliding the time window; the sliding time window can frame the time sequence according to the specified time length, so as to calculate the statistical index in the frame. Corresponding to a time slider of a specified length sliding on the time series, the data in the time slider can be fed back every time the time slider slides one unit. Accordingly, it is necessary to determine a sliding time window corresponding to the behavior data, that is, into which time windows the behavior data needs to be divided, to complete analysis of data in the corresponding time windows, thereby generating a behavior safety baseline. Further, determining a sliding time window corresponding to the behavior data requires first determining an initial time of the sliding time window.
103, determining at least one sliding time window corresponding to the first behavior data according to the initial time of the sliding time window and the configuration parameters of the sliding time window; the sliding time window is used for generating a behavior safety baseline corresponding to the first behavior data.
Specifically, the configuration parameters of the sliding time window shown in table 1 include specific configuration information of the sliding time window, and according to the initial time of the sliding time window and the configuration parameters of the sliding time window shown in table 1, the start time and the end time of each sliding time window can be accurately determined, that is, each sliding time window corresponding to the behavior data is accurately determined; furthermore, after the sliding time windows corresponding to the behavior data are determined, the dynamic change characteristics of the data corresponding to each sliding time window can be accurately determined, so that the behavior safety baseline contains richer and accurate user behavior characteristics, and the abnormal behavior can be accurately and effectively detected according to the behavior safety baseline; meanwhile, after the sliding time window corresponding to the behavior data is determined, the time accumulation effect of the behavior data is avoided, and the analysis and processing complexity of the behavior data is reduced.
For example, as shown in fig. 2, after behavior data is acquired, a sliding time window corresponding to the behavior data is determined according to generation time and configuration parameters of the behavior data, and information of the sliding time window and the behavior data are transmitted to a lower-level processing unit for processing, so that a behavior safety baseline can be generated.
For example, if the generation time of the behavior data a is 6 points 30, the start time of the sliding time window is 6 points, the length of the sliding time window in the configuration parameters is 5 hours, and the iteration step is 1 hour, then the sliding time window corresponding to the behavior data a is: sliding time window one 6 o 'clock to 11 o' clock, sliding time window two 5 o 'clock to 10 o' clock, sliding time window three 4 o 'clock to 9 o' clock, sliding time window four 3 o 'clock to 8 o' clock and sliding time window five 2 o 'clock to 7 o' clock.
Assuming that the behavioral security baseline is generated based on 24-hour-a-day behavioral data, when 24-hour data is directly analyzed, the difficulty and complexity of data analysis processing are too large due to the large amount of data existing within 24 hours; after the sliding time window corresponding to the behavior data is determined, if the window length of the sliding time window is 5 hours, the analysis and processing of data within 24 hours can be respectively carried out from 2 points to 7 points, from 3 points to 8 points, from 4 points to 9 points, and so on, and finally the analysis and processing of the data within 24 hours are realized, namely the analysis and processing of the data within 5 hours of the sliding time window length are compared with the analysis and processing of the data within 24 hours, the time accumulation of the behavior data is avoided, and the analysis and processing complexity of the behavior data is reduced; meanwhile, after the sliding time windows corresponding to the behavior data are determined, the dynamic change characteristics of the data in each sliding time window can be accurately obtained, namely the dynamic change characteristics of the data from 2 points to 7 points can be obtained and analyzed compared with the data from 3 points to 8 points, so that the behavior safety baseline contains richer and more accurate user behavior characteristics, and the abnormal behavior can be accurately and effectively detected according to the behavior safety baseline.
In the method of the above embodiment, the initial time of the sliding time window corresponding to the first behavior data is determined according to the generation time of the first behavior data; determining at least one sliding time window corresponding to the first behavior data according to the initial time of the sliding time window and the configuration parameters of the sliding time window; the method comprises the steps that a sliding time window corresponding to behavior data is accurately determined through generation time of first behavior data and sliding time window configuration parameters; furthermore, after the sliding time windows corresponding to the behavior data are determined, the dynamic change characteristics of the data corresponding to each sliding time window can be accurately analyzed, so that the generated behavior safety baseline contains richer and accurate user behavior characteristics, and the abnormal behavior can be accurately and effectively detected according to the generated behavior safety baseline; meanwhile, the sliding time window corresponding to the behavior data is accurately determined, the time accumulation effect of the behavior data is avoided, and the complexity of analyzing and processing the behavior data is reduced.
Optionally, the initial time of the sliding time window corresponding to the first behavior data is determined according to the generation time of the first behavior data and the length of the time window in the sliding time window configuration parameter.
Specifically, the sliding time window configuration parameter includes specific configuration information of the sliding time window, and optionally, the configuration parameter includes some or all of the parameters shown in table 1. Optionally, the initial time of the sliding time window corresponding to the behavior data may be obtained as follows: the initial time of the time window is equal to the behavior data generation time- (behavior data generation time + sliding time window length)% sliding time window length; that is, the initial time of the sliding time window corresponding to the behavior data can be accurately determined according to the generation time of the behavior data and the length of the time window in the sliding time window configuration parameters.
It should be noted that, in other embodiments, the initial time of the time window may also be generated in other manners based on the behavior data generation time, which is not limited in this embodiment of the present invention.
TABLE 1
Figure BDA0003543120220000101
Figure BDA0003543120220000111
For example, the generation time of the behavior data a is 6 points 30; if the length of the sliding time window is 5 hours, the sliding time window corresponding to the behavior data a may be the sliding time window from the first 2 o 'clock to the second 7 o' clock, the sliding time window from the second 3 o 'clock to the second 8 o' clock, the sliding time window from the third 4 o 'clock to the third 9 o' clock, the sliding time window from the fourth 5 o 'clock to the third 10 o' clock, and the sliding time window from the fifth 6 o 'clock to the fifth 11 o' clock, that is, the behavior data a is analyzed and processed in the sliding time window from the first sliding time window to the sliding time window 5.
In an embodiment, determining at least one sliding time window corresponding to the first behavior data according to the initial time of the sliding time window and the sliding time window configuration parameters includes:
determining the starting time and the ending time of each sliding time window according to the initial time of the sliding time window and the configuration parameters of the sliding time window;
and determining each sliding time window according to the starting time and the ending time of each sliding time window.
Specifically, the sliding time window is determined by the start time and the end time of the sliding time window, so that the start time and the end time of the sliding time window need to be determined to perform subsequent data analysis and generation of a behavior safety baseline. As shown in table 1, the configuration parameters of the sliding time window include specific configuration information of the sliding time window, and according to the initial time of the sliding time window and the configuration parameters of the sliding time window shown in table 1, the start time and the end time of each sliding time window can be accurately determined, and further, each sliding time window corresponding to the behavior data can be accurately determined.
According to the method of the embodiment, the starting time and the ending time of each sliding time window can be accurately determined according to the initial time of the sliding time window and the sliding time window configuration parameters containing the specific configuration information of the window, and each sliding time window corresponding to the behavior data can be accurately determined; further, according to the determined sliding time window, analysis and processing of data in the corresponding time window can be performed, and finally a behavior safety baseline is generated.
Optionally, determining the start time and the end time of each sliding time window according to the initial time of the sliding time window and the configuration parameters of the sliding time window, includes:
step a, determining first time according to the initial time of a sliding time window and the length of the time window in the configuration parameters of the sliding time window;
step b, when the initial time of the sliding time window is later than the first time, taking the initial time of the sliding time window as the starting time of the sliding time window, and determining the ending time of the sliding time window according to the starting time of the sliding time window and the length of the time window; and updating the initial time of the sliding time window according to the iteration step length of the sliding time window included by the configuration parameters of the sliding time window, and repeatedly executing the step b until the initial time of the sliding time window is not later than the first time.
Specifically, determining a first time according to the initial time of the sliding time window and the length of the time window in the sliding time window configuration parameters; optionally, the first time is a data generation time-sliding time window length;
when the initial time of the sliding time window is later than the first time, taking the initial time of the sliding time window as the starting time of the sliding time window, and determining the ending time of the sliding time window according to the starting time of the sliding time window and the length of the time window; updating the initial time of the sliding time window according to the iteration step length of the sliding time window included by the configuration parameters of the sliding time window, and repeatedly executing the step b until the initial time of the sliding time window is not later than the first time; optionally, when the initial time of the sliding time window is later than the first time, taking the initial time of the sliding time window as the starting time of the sliding time window, and the ending time of the sliding time window is the ending time of the sliding time window + the sliding time window length-1; optionally, after determining the end time of the sliding time window, the initial time of the sliding time window needs to be updated, that is, the updating of the initial time of the sliding time window may be implemented by using the initial time of the sliding time window as the initial time of the sliding time window-the iteration step of the sliding time window; after the initial time of the sliding time window is updated, whether the initial time of the updated sliding time window is later than the first time needs to be judged again, and whether the subsequent sliding time window is determined continuously or not is determined according to the judgment result.
For example, the initial time of the sliding time window is A1, when A1 is later than the first time, the initial time A1 of the sliding time window is used as the starting time A1 of the sliding time window, the ending time B1 of the sliding time window is determined, and the sliding time window A1B1 is determined according to the starting time A1 of the moving time window and the ending time B1 of the sliding time window; further, updating the sliding time window initial time A1 to the sliding time window initial time A2, when A2 is later than the first time, taking the sliding time window initial time A2 as the sliding time window starting time A2, determining the sliding time window ending time B2, and determining the sliding time window A2B2 according to the sliding time window starting time A2 and the sliding time window ending time B2; further, the initial time a2 of the sliding time window is updated to the initial time A3 of the sliding time window, and if A3 is earlier than the first time, the calculation of the sliding time window is stopped.
In the method of the above embodiment, whether to stop calculating the sliding time window or to continue calculating the sliding time window is determined by whether the initial time of the sliding time window is later than the first time; updating the end time of each sliding time window is realized by updating the initial time of the sliding time window, namely, each sliding time window is accurately calculated; and then according to the determined sliding time window, the data in the corresponding time window can be analyzed and processed, and finally a behavior safety baseline is generated.
In an embodiment, the method for managing and controlling a sliding time window further includes:
determining the closing time and the overtime time of each sliding time window according to the ending time of each sliding time window and the configuration parameters of the sliding time window; closing time is behavior data indicating when the sliding time window ceases to receive input; the timeout time is used to indicate the closing time after the sliding time window has timed out.
Specifically, when the starting time and the ending time of the sliding time windows are determined, the closing time and the overtime time of each sliding time window are determined according to the ending time of each sliding time window and the configuration parameters of the sliding time windows; wherein, the closing time is used to indicate when the sliding time window stops receiving the input behavior data, and optionally, the closing time of the sliding time window is equal to the end time of the sliding time window + the sliding time window time delay; the timeout time is used to indicate a closing time after the sliding time window is timed out, and optionally, the timeout time of the sliding time window is equal to the closing time + the closing time of the sliding time window + the length of the sliding time window.
Illustratively, as shown in fig. 3, the start time of the sliding time window is determined according to the generation time of the behavior data; when the start time of the sliding time window is later than the first time, determining the end time, the closing time and the overtime time of the sliding time window, determining the sliding time window, then adding the determined sliding time window into the time window sequence and updating the start time of the sliding time window.
In the method of the above embodiment, the closing time and the timeout time of each sliding time window are determined according to the ending time of each sliding time window and the sliding time window configuration parameters; wherein the closing time is used to indicate when the sliding time window stops receiving the entered behavior data; the overtime time is used for representing the closing time after the sliding time window is overtime; the problem of insufficient data integrity and accuracy caused by data delay is solved, the integrity and the accuracy of data in a sliding time window are ensured, and the accuracy and the integrity of a behavior safety baseline are further improved.
In an embodiment, the method for managing and controlling a sliding time window further includes:
for any sliding time window, determining whether the sliding time window is an active window;
and if so, determining whether the second behavior data is delayed behavior data relative to the sliding time window according to the generation time of the currently input second behavior data and the end time of the sliding time window.
Specifically, in the process of determining the sliding time window corresponding to the behavior data, new behavior data may be continuously input, and therefore, it is necessary to determine whether to put the newly input behavior data into the sliding time window for analysis and processing. Optionally, traversing all sliding time windows, and determining whether the state of each time window is active, where the window state is active, which indicates that data in a time period corresponding to the time window is being analyzed. When the window state is an active state, whether to put the newly input behavior data into the active window for corresponding analysis and processing needs to be determined; accordingly, it may be determined whether the second behavior data is delayed behavior data with respect to the sliding time window according to the generation time of the currently newly input behavior data and the end time of the sliding time window.
Optionally, determining whether the second behavior data is delayed behavior data with respect to each sliding time window includes:
and if the generation time of the second behavior data and the end time of the sliding time window meet the fourth condition, the second behavior data is delay behavior data relative to the sliding time window.
Specifically, it may be determined whether the second behavior data newly input currently is delay behavior data with respect to the sliding time window by determining whether the generation time of the second behavior data newly input currently and the end time of the sliding time window satisfy a fourth condition; optionally, the fourth condition is the end time of the sliding time window + M, e.g. M is 1; and if the generation time of the second behavior data which is newly input at present is not earlier than the end time +1 of the sliding time window, determining that the behavior data which is newly input at present is delay data relative to the active time window.
The method of the above embodiment determines whether the newly input behavior data is delay data of an active window, that is, determines whether to put the newly input behavior data into an active sliding time window for analysis and processing; the newly input behavior data are timely put into the corresponding active sliding time window for calculation, so that the integrity and the accuracy of the data in the sliding time window are ensured, and the accuracy and the integrity of the behavior safety baseline are further improved.
In one embodiment, determining whether the sliding time window is an active window comprises:
searching whether a sliding time window exists in the active window record information;
the method further comprises the following steps:
and if not, determining whether the second behavior data is delay behavior data relative to the sliding time window according to the generation time of the currently input second behavior data and the end time of the sliding time window.
Specifically, in the process of determining the sliding time window corresponding to the behavior data, new behavior data may be continuously input, and therefore, it is necessary to determine whether to put the newly input behavior data into the sliding time window for analysis and processing. Optionally, traversing all the sliding time windows, determining whether the state of each time window is active, that is, determining whether each time window exists in the active window record information, if so, the state of the corresponding window is active, otherwise, the corresponding window is inactive.
Further, if the time window does not exist in the active window record information, storing the current sliding time window into a time window record table, and determining whether the newly input behavior data is delay behavior data relative to the sliding time window according to the generation time of the newly input behavior data and the end time of the sliding time window; in the present invention, details of corresponding embodiments are described, and a repeated description is not repeated herein.
In an embodiment, the method for managing and controlling a sliding time window further includes:
if no sliding time window exists in the active window record information, registering a first timer and determining the trigger time of the first timer, wherein the trigger time of the first timer is determined according to the end time of the sliding time window or the closing time of the sliding time window; and/or the presence of a gas in the gas,
if the trigger time of the first timer and the end time of the sliding time window meet a first condition, updating the state of the sliding time window into a preparation state; and/or the presence of a gas in the atmosphere,
if the triggering time of the first timer and the ending time of the sliding time window do not meet the first condition, and the triggering time of the first timer and the closing time of the sliding time window meet the second condition, updating the state of the sliding time window to be in a closing state; and/or the presence of a gas in the gas,
and if the triggering time of the first timer and the ending time of the sliding time window do not meet the first condition, the triggering time of the first timer and the closing time of the sliding time window do not meet the second condition, and the triggering time of the first timer and the overtime of the sliding time window meet the third condition, updating the state of the sliding time window to be in an overtime state.
Specifically, the behavior safety baseline is usually obtained by taking a time period as a unit, that is, data in a corresponding time window can be analyzed and processed according to a determined sliding time window to generate a behavior safety baseline; therefore, in order to accurately analyze and process the data corresponding to the sliding time window, the state of the sliding time window needs to be updated accurately in time.
Optionally, if no sliding time window exists in the active window record information, registering a first timer; if the generation time of the newly input behavior data is not earlier than the fourth condition, the triggering time of the first timer is the closing time of the sliding time window; if the generation time of the newly input behavior data is earlier than the fourth condition, the trigger time of the first timer is the end time + N of the sliding time window, for example, N is 1; wherein the fourth condition is the end time + M of the sliding time window, for example, M is 1, that is, the trigger time of the first timer is determined according to the end time of the sliding time window or the closing time of the sliding time window; when the generation time of the newly input behavior data is not earlier than the fourth condition, the registered timer value is < end time of sliding time window + N, time window >, and when the generation time of the newly input behavior data is not earlier than the fourth condition, the registered timer value is < closing time of sliding time window, time window >.
When the trigger time of the first timer and the end time of the sliding time window meet a first condition, updating the state of the sliding time window to a preparation state, wherein the first condition is as follows: the trigger time of the first timer is equal to the end time + N of the sliding time window, for example, N is 1.
If the trigger time of the first timer and the end time of the sliding time window do not meet the first condition, and the trigger time of the first timer and the end time of the sliding time window meet the second condition, updating the state of the sliding time window to be in a closed state, optionally, if the trigger time of the first timer and the end time of the sliding time window do not meet the first condition, and the trigger time of the first timer is equal to the end time of the sliding time window, updating the state of the sliding time window to be in a closed state; wherein the first condition is: the trigger time of the first timer is equal to the end time + N of the sliding time window, for example, N is 1.
If the triggering time of the first timer and the ending time of the sliding time window do not meet the first condition, the triggering time of the first timer and the closing time of the sliding time window do not meet the second condition, and the triggering time of the first timer and the overtime of the sliding time window meet the third condition, updating the state of the sliding time window to be an overtime state; optionally, when the trigger time of the first timer and the end time of the sliding time window do not satisfy the first condition, and the trigger time of the first timer and the closing time of the sliding time window do not satisfy the second condition, and the trigger time of the first timer is equal to the timeout time of the sliding time window, updating the state of the sliding time window to the timeout state; wherein the first condition is: the trigger time of the first timer is equal to the end time + N of the sliding time window, for example, N is 1; the second condition is that the trigger time of the first time timer equals the closing time of the sliding time window.
Exemplarily, as shown in fig. 4, all time windows in the time window sequence are traversed, and whether the corresponding time window is active is determined by querying the active time window record table; if the time window exists in the active time window record table, whether the generation time of the newly input behavior data and the ending time of the sliding time window meet a fourth condition is judged, if the fourth condition is met, the newly input behavior data is delay behavior data relative to the sliding time window, a parameter < the current time window, the behavior data,' the delay behavior data > is transmitted into a lower-level processing unit, and if the fourth condition is not met, the parameter < the current time window, the behavior data > is transmitted into the lower-level processing unit. If the time window does not exist in the active time window record table, registering a first timer, and determining whether the newly input behavior data is delay behavior data relative to the sliding time window according to the generation time of the newly input behavior data and the end time of the sliding time window.
As shown in fig. 5, the state of the sliding time window is updated according to the trigger time of the first timer, and if the trigger time of the first timer and the end time of the sliding time window satisfy the first condition, the state of the sliding time window is updated to a preparation state, and the time timer is registered, and the timer value is < the closing time of the time window, time window >, and the parameter < the current time window, "preparation window" > is transmitted to the lower-level calculator; if the triggering time of the first timer and the ending time of the sliding time window do not meet the first condition and the triggering time of the first timer and the closing time of the sliding time window meet the second condition, updating the state of the sliding time window to a closing state, registering the time timer, deleting the current time window from the active time window record table, storing the current time window into the closing time window record table, and transmitting the parameter < the current time window, 'closing window' > into a lower-level calculator; if the triggering time of the first timer and the ending time of the sliding time window do not meet the first condition, and the triggering time of the first timer and the closing time of the sliding time window do not meet the second condition, whether the triggering time of the first timer and the overtime time of the sliding time window meet a third condition or not, and if the triggering time of the first timer and the closing time of the sliding time window meet the third condition, updating the state of the sliding time window to be in an overtime state; deleting the current time window from a closed time window record table closedTimeWindowMap, and transmitting a parameter < the current time window, 'timeout window' > into a subordinate calculator; otherwise, stopping the time timer to trigger the calculation process; wherein the first condition is: the trigger time of the first timer is equal to the end time + N of the sliding time window, for example, N is 1; the second condition is that the trigger time of the first time timer equals the closing time of the sliding time window.
In the method of the above embodiment, the state of the sliding time window is accurately updated by determining the relationship between the first timer trigger time and the sliding time window; by updating the sliding time window state, namely accurately setting the window state to be a preparation state, a closing state or an overtime state, the floor drain analysis and the redundancy analysis of data in the sliding time window are avoided correspondingly, the integrity and the accuracy of the data in the sliding time window are ensured, and the accuracy and the integrity of the behavior safety baseline are further improved.
In an embodiment, if the generation time of the second behavior data is earlier than the second time, the second behavior data is discarded; the second time is determined based on a generation time of the second behavior data and a delay time of the sliding time window.
Specifically, in the process of determining the sliding time window corresponding to the behavior data, new behavior data may be continuously input, and therefore, it is necessary to determine whether to put the newly input behavior data into the sliding time window for analysis and processing; if the generation time of the newly input behavior data is earlier than the second time, discarding the second behavior data; the second time is determined based on the generation time of the second behavior data and the delay time of the sliding time window; wherein the second time is a generation time of the newly input behavior data-a time delay of the sliding time window.
For example, as shown in fig. 6, the generation time and the second time of the newly input behavior data are obtained, and it is determined whether the newly input behavior data is timeout data; if the data is overtime data, stopping calculating the sliding window based on the current newly input behavior data, otherwise determining the corresponding sliding time window according to the input behavior data; and then updating the state of the sliding time window, and transmitting the behavior data and the sliding time window into a lower-level processing unit under the condition of ensuring the integrity and the accuracy of the data in the sliding time window so as to generate an accurate behavior safety baseline. Alternatively, it is determined whether the newly input behavior data is timeout data, for example, as shown in fig. 7, by determining whether the current time is earlier than the generation time of the newly input behavior data, if so, the current time and the second time are updated, otherwise, if the generation time of the second behavior data is earlier than the second time, the newly input behavior data is discarded, that is, the calculation of the sliding time window based on the newly input behavior data is stopped.
According to the method, the relation between the generation time of the newly input behavior data and the second time is judged, so that the newly input behavior data can be accurately determined, the newly input behavior data are discarded, or the newly input behavior data are put into the corresponding sliding time window for analysis and processing, the integrity and the accuracy of the data in the sliding time window are ensured, and the accuracy and the integrity of the behavior safety baseline are further improved.
The following describes the device for controlling a sliding time window according to the present invention, and the device for controlling a sliding time window described below and the method for controlling a sliding time window described above may be referred to in correspondence.
Fig. 8 is a schematic structural diagram of a sliding time window management and control device provided by the present invention. The control device for sliding time window provided by this embodiment includes:
an obtaining module 710, configured to obtain a generation time of the first behavior data;
a determining module 720, configured to determine, according to the generation time of the first behavior data, an initial time of a sliding time window corresponding to the first behavior data;
the management and control module 730 is configured to determine at least one sliding time window corresponding to the first behavior data according to the initial time of the sliding time window and the sliding time window configuration parameters; the sliding time window is used for generating a behavior safety baseline corresponding to the first behavior data.
Optionally, the management and control module 730 is specifically configured to: determining the starting time and the ending time of each sliding time window according to the initial time of the sliding time window and the configuration parameters of the sliding time window;
and determining each sliding time window according to the starting time and the ending time of each sliding time window.
Optionally, the management and control module 730 is specifically configured to:
step a, determining first time according to the initial time of a sliding time window and the length of the time window in the configuration parameters of the sliding time window;
step b, when the initial time of the sliding time window is later than the first time, taking the initial time of the sliding time window as the starting time of the sliding time window, and determining the ending time of the sliding time window according to the starting time of the sliding time window and the length of the time window; and updating the initial time of the sliding time window according to the iteration step length of the sliding time window included by the configuration parameters of the sliding time window, and repeatedly executing the step b until the initial time of the sliding time window is not later than the first time.
Optionally, the determining module 720 is specifically configured to: and determining the initial time of the sliding time window corresponding to the first behavior data according to the generation time of the first behavior data and the length of the time window in the sliding time window configuration parameters.
Optionally, the management and control module 730 is further configured to: determining the closing time and the overtime time of each sliding time window according to the ending time of each sliding time window and the configuration parameters of the sliding time window; closing time is behavior data indicating when the sliding time window ceases to receive input; the timeout time is used to represent the closing time after the sliding time window times out.
Optionally, the management and control module 730 is further configured to: for any sliding time window, determining whether the sliding time window is an active window;
and if so, determining whether the second behavior data is delayed behavior data relative to the sliding time window according to the generation time of the currently input second behavior data and the end time of the sliding time window.
Optionally, the management and control module 730 is further configured to: searching whether a sliding time window exists in the active window record information;
and if not, determining whether the second behavior data is delayed behavior data relative to the sliding time window according to the generation time of the currently input second behavior data and the end time of the sliding time window.
Optionally, the management module 730 is further configured to: if no sliding time window exists in the active window record information, registering a first timer and determining the trigger time of the first timer, wherein the trigger time of the first timer is determined according to the end time of the sliding time window or the closing time of the sliding time window; and/or the presence of a gas in the gas,
if the trigger time of the first timer and the end time of the sliding time window meet a first condition, updating the state of the sliding time window into a preparation state; and/or if the trigger time of the first timer and the end time of the sliding time window do not meet the first condition and the trigger time of the first timer and the closing time of the sliding time window meet the second condition, updating the state of the sliding time window to be in a closing state; and/or if the triggering time of the first timer and the ending time of the sliding time window do not meet the first condition, the triggering time of the first timer and the closing time of the sliding time window do not meet the second condition, and the triggering time of the first timer and the overtime of the sliding time window meet the third condition, updating the state of the sliding time window to be the overtime state.
Optionally, the management and control module 730 is further configured to:
and if the generation time of the second behavior data and the end time of the sliding time window meet a fourth condition, determining that the second behavior data is delay behavior data relative to the sliding time window.
Optionally, the management and control module 730 is further configured to: if the generation time of the second behavior data is earlier than the second time, discarding the second behavior data; the second time is determined based on a generation time of the second behavior data and a delay time of the sliding time window.
The apparatus of the embodiment of the present invention is configured to perform the method of any of the foregoing method embodiments, and the implementation principle and the technical effect are similar, which are not described herein again.
Fig. 9 illustrates a physical structure diagram of an electronic device, which may include: a processor (processor)810, a communication Interface 820, a memory 830 and a communication bus 840, wherein the processor 810, the communication Interface 820 and the memory 830 communicate with each other via the communication bus 840. Processor 810 may invoke logic instructions in memory 830 to perform a method of governing a sliding time window, the method comprising: acquiring the generation time of first behavior data; determining the initial time of a sliding time window corresponding to the first behavior data according to the generation time of the first behavior data; determining at least one sliding time window corresponding to the first behavior data according to the initial time of the sliding time window and the configuration parameters of the sliding time window; the sliding time window is used for generating a behavior safety baseline corresponding to the first behavior data.
In addition, the logic instructions in the memory 830 may be implemented in software functional units and stored in a computer readable storage medium when the logic instructions are sold or used as independent products. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and other various media capable of storing program codes.
In another aspect, the present invention also provides a computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions which, when executed by a computer, enable the computer to perform a method for managing a sliding time window provided by the above methods, the method comprising: acquiring the generation time of first behavior data; determining the initial time of a sliding time window corresponding to the first behavior data according to the generation time of the first behavior data; determining at least one sliding time window corresponding to the first behavior data according to the initial time of the sliding time window and the configuration parameters of the sliding time window; the sliding time window is used for generating a behavior safety baseline corresponding to the first behavior data.
In yet another aspect, the present invention also provides a non-transitory computer-readable storage medium, on which a computer program is stored, the computer program being implemented by a processor to perform the method for managing a sliding time window provided in the above, the method comprising: acquiring the generation time of first behavior data; determining the initial time of a sliding time window corresponding to the first behavior data according to the generation time of the first behavior data; determining at least one sliding time window corresponding to the first behavior data according to the initial time of the sliding time window and the configuration parameters of the sliding time window; the sliding time window is used for generating a behavior safety baseline corresponding to the first behavior data.
The above-described embodiments of the apparatus are merely illustrative, and the units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the present embodiment. One of ordinary skill in the art can understand and implement it without inventive effort.
Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware. With this understanding in mind, the above-described technical solutions may be embodied in the form of a software product, which can be stored in a computer-readable storage medium such as ROM/RAM, magnetic disk, optical disk, etc., and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the methods described in the embodiments or some parts of the embodiments.
Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (14)

1. A method for managing and controlling a sliding time window is characterized by comprising the following steps:
acquiring the generation time of first behavior data;
determining the initial time of a sliding time window corresponding to the first behavior data according to the generation time of the first behavior data;
determining at least one sliding time window corresponding to the first behavior data according to the initial time of the sliding time window and the configuration parameters of the sliding time window; the sliding time window is used for generating a behavior safety baseline corresponding to the first behavior data.
2. The method for managing and controlling a sliding time window according to claim 1, wherein the determining, according to the initial time of the sliding time window and the sliding time window configuration parameters, at least one sliding time window corresponding to the first behavior data includes:
determining the starting time and the ending time of each sliding time window according to the initial time of the sliding time window and the configuration parameters of the sliding time window;
and determining each sliding time window according to the starting time and the ending time of each sliding time window.
3. The method for managing and controlling sliding time windows according to claim 2, wherein the determining the start time and the end time of each sliding time window according to the initial time and the sliding time window configuration parameters of the sliding time window includes:
step a, determining first time according to the initial time of the sliding time window and the length of the time window in the sliding time window configuration parameters;
step b, when the initial time of the sliding time window is later than a first time, taking the initial time of the sliding time window as the starting time of the sliding time window, and determining the ending time of the sliding time window according to the starting time of the sliding time window and the length of the time window; and updating the initial time of the sliding time window according to the iteration step length of the sliding time window included by the configuration parameters of the sliding time window, and repeatedly executing the step b until the initial time of the sliding time window is not later than the first time.
4. The method for managing and controlling the sliding time window according to any one of claims 1 to 3, wherein the determining the initial time of the sliding time window corresponding to the first behavior data according to the generation time of the first behavior data includes:
and determining the initial time of the sliding time window corresponding to the first behavior data according to the generation time of the first behavior data and the length of the time window in the sliding time window configuration parameters.
5. A method for managing a sliding time window according to claim 3, characterized in that said method further comprises:
determining the closing time and the overtime time of each sliding time window according to the ending time of each sliding time window and the configuration parameters of the sliding time window; the closing time is used for behavior data indicating when the sliding time window stops receiving input; the timeout time is used to represent a closing time after the sliding time window has timed out.
6. A method for managing a sliding time window according to any one of claims 1 to 3, characterized in that it further comprises:
for any of the sliding time windows, determining whether the sliding time window is an active window;
and if so, determining whether the second behavior data is delayed behavior data relative to the sliding time window according to the generation time of the currently input second behavior data and the end time of the sliding time window.
7. The method for managing a sliding time window according to claim 6, wherein said determining whether the sliding time window is an active window includes:
searching whether the sliding time window exists in the active window record information;
the method further comprises the following steps:
and if not, determining whether the second behavior data is delayed behavior data relative to the sliding time window according to the generation time of the currently input second behavior data and the end time of the sliding time window.
8. A method for the regulation of a sliding time window according to claim 6 or 7, characterized in that it further comprises:
if the sliding time window does not exist in the active window record information, registering a first timer, and determining the trigger time of the first timer, wherein the trigger time of the first timer is determined according to the end time of the sliding time window or the closing time of the sliding time window; and/or the presence of a gas in the gas,
if the trigger time of the first timer and the end time of the sliding time window meet a first condition, updating the state of the sliding time window to a preparation state; and/or the presence of a gas in the gas,
if the trigger time of the first timer and the end time of the sliding time window do not meet the first condition, and the trigger time of the first timer and the closing time of the sliding time window meet a second condition, updating the state of the sliding time window to be in a closing state; and/or the presence of a gas in the gas,
and if the triggering time of the first timer and the ending time of the sliding time window do not meet the first condition, the triggering time of the first timer and the closing time of the sliding time window do not meet the second condition, and the triggering time of the first timer and the overtime of the sliding time window meet the third condition, updating the state of the sliding time window to be in an overtime state.
9. The method for managing and controlling sliding time windows according to claim 6, wherein said determining whether the second behavior data is delay behavior data with respect to each of the sliding time windows includes:
and if the generation time of the second behavior data and the end time of the sliding time window meet a fourth condition, the second behavior data is delay behavior data relative to the sliding time window.
10. A method for regulating a sliding time window according to claim 9, characterized in that said method further comprises:
if the generation time of the second behavior data is earlier than a second time, discarding the second behavior data; the second time is determined based on a generation time of the second behavior data and a delay time of the sliding time window.
11. A management and control device for sliding time windows is characterized by comprising:
the acquisition module is used for acquiring the generation time of the first behavior data;
the determining module is used for determining the initial time of a sliding time window corresponding to the first behavior data according to the generation time of the first behavior data;
the management and control module is used for determining at least one sliding time window corresponding to the first behavior data according to the initial time of the sliding time window and the configuration parameters of the sliding time window; the sliding time window is used for generating a behavior safety baseline corresponding to the first behavior data.
12. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor implements the method for managing a sliding time window according to any one of claims 1 to 10 when executing the program.
13. A non-transitory computer readable storage medium, on which a computer program is stored, which, when being executed by a processor, implements a method of managing a sliding time window according to any one of claims 1 to 10.
14. A computer program product having executable instructions stored thereon, which instructions, when executed by a processor, cause the processor to implement a method of managing a sliding time window according to any one of claims 1 to 10.
CN202210238044.2A 2022-03-11 2022-03-11 Control method, device, equipment and storage medium for sliding time window Pending CN114826655A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202210238044.2A CN114826655A (en) 2022-03-11 2022-03-11 Control method, device, equipment and storage medium for sliding time window

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202210238044.2A CN114826655A (en) 2022-03-11 2022-03-11 Control method, device, equipment and storage medium for sliding time window

Publications (1)

Publication Number Publication Date
CN114826655A true CN114826655A (en) 2022-07-29

Family

ID=82528458

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202210238044.2A Pending CN114826655A (en) 2022-03-11 2022-03-11 Control method, device, equipment and storage medium for sliding time window

Country Status (1)

Country Link
CN (1) CN114826655A (en)

Similar Documents

Publication Publication Date Title
CN107302547A (en) A kind of web service exceptions detection method and device
CN113992340B (en) User abnormal behavior identification method, device, equipment and storage medium
WO2014206131A1 (en) Method and apparatus for report generation
Cohen et al. Don't let the negatives bring you down: sampling from streams of signed updates
CN110704583A (en) Medical record analysis method and device, server and storage medium
US10649977B2 (en) Isolation anomaly quantification through heuristical pattern detection
CN109284331A (en) Accreditation information acquisition method, terminal device and medium based on business datum resource
CN111950237B (en) Sentence rewriting method, sentence rewriting device and electronic equipment
CN108923967B (en) Duplication-removing flow recording method, duplication-removing flow recording device, server and storage medium
CN107688619A (en) A kind of daily record data processing method and processing device
Rebuge et al. A process mining analysis on a virtual electronic patient record system
US9922071B2 (en) Isolation anomaly quantification through heuristical pattern detection
CN114826655A (en) Control method, device, equipment and storage medium for sliding time window
CN111309706A (en) Model training method and device, readable storage medium and electronic equipment
CN105245380B (en) Message propagation mode identification method and device
CN114399404A (en) State monitoring method and device, electronic equipment and readable storage medium
CN114281807A (en) Data quality auditing method, device, equipment and storage medium
CN116226231B (en) Data segmentation method and related device
CN114238243B (en) Local log sampling method for process discovery
CN116738241B (en) Threshold generation method, device, terminal and medium based on time granularity
CN113238742B (en) Direct current control page protection program modification playback method, device, terminal and medium
CN113190844B (en) Detection method, correlation method and correlation device
CN114357043A (en) Data processing method and device, electronic equipment and computer program product
CN117933995A (en) Transaction data processing method and device, electronic equipment and storage medium
CN114615039A (en) Abnormal behavior detection method, device, equipment and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination