Method and device for updating online self-learning event detection model

A updating device, comprising:

• a processor, a memory, communication interfaces, and a bus;
• wherein,
• the processor, the memory, and the communication interfaces are connected and communicated via the bus;
• the memory is configured to store executable program codes;
• the processor is configured to execute programs corresponding to the executable program codes by reading the executable program codes stored in the memory in order to perform:
• presenting, when at least one target alerting event generated by the current event detection model is detected, to a user the at least one target alerting event, so that the user provides an event result for each target alerting event based on the at least one presented target alerting event;
• obtaining the event result for each target alerting event provided by the user based on the at least one presented target alerting event;
• determining whether a target alerting event for which an event result has been provided by the user satisfies a predetermined update condition, and if so, training and obtaining a target event detection model based on at least one target alerting event for which an event result has been provided by the user and corresponding event result, and predetermined training samples, wherein the predetermined training samples comprise at least one of:
• a plurality of predefined reference events and corresponding event results, and a plurality of historical alerting events that have been confirmed by the user and corresponding event results;
• and
• replacing the current event detection model with the target event detection model.