Abnormal User Identification
AssigneeNew H3C Security Technologies Co., Ltd.
InventorChengjie Gu
Life of this patent
Estimating the term…
Loading patent…
AssigneeNew H3C Security Technologies Co., Ltd.
InventorChengjie Gu
Estimating the term…
User behavior data of multiple users is acquired, and multiple user eigenvalues of user behavior data of each user under preset multiple user behavior dimensions are extracted. A user eigenvector of each user is determined based on the multiple eigenvalues of this user. Multiple user classes are obtained by clustering the user eigenvectors of multiple users are clustered through a preset clustering algorithm. A central vector of each user class is determined based on the user eigenvectors included in this user class. A difference eigenvector of each user class is determined, wherein a distance between the difference eigenvector and a central vector of an aggregation class to which the difference eigenvector belongs is not within a preset distance range. A user characterized by the difference eigenvector is determined as an abnormal user.
An abnormal user identification method, comprising:
An electronic device, comprising a processor and a machine readable storage medium which stores machine executable instructions that can be executed by the processor, wherein, the machine executable instructions cause the processor to:
Dependencies are inferred from the claim text.