Signaling analysis method and related apparatus

A signaling analysis apparatus, comprising a processor and a memory, the memory being configured to store program instructions that, when executed by the processor, cause the signaling analysis apparatus to perform operations comprising:

• obtaining a to-be-detected signaling flow, wherein the to-be-detected signaling flow includes N pieces of signaling, N being an integer greater than 1;
• performing first feature construction on a message type and an information element that are included in each of the N pieces of signaling to obtain a first feature sequence, the first feature sequence comprising N first feature vectors, the N first feature vectors being in a one-to-one correspondence with the N pieces of signaling;
• and
• inputting the first feature sequence to a first signaling anomaly detection model to perform anomaly detection processing to produce a first anomaly detection result indicating that the to-be-detected signaling flow is normal or abnormal.

A computer-readable storage medium comprising a non-transitory computer-readable storage medium storing a computer program including program instructions to perform:

• obtaining a to-be-detected signaling flow, wherein the to-be-detected signaling flow comprises N pieces of signaling, and N is an integer greater than 1;
• perform first feature construction on a message type and an information element that are included in each of the N pieces of signaling to obtain a first feature sequence, the first feature sequence comprising N first feature vectors, the N first feature vectors being in a one-to-one correspondence with the N pieces of signaling;
• inputting the first feature sequence to a first signaling anomaly detection model to perform anomaly detection processing;
• and
• outputting a first anomaly detection result indicates that the to-be-detected signaling flow is normal or abnormal.