Monitoring terminal identification method and device, and storage medium

An electronic device, comprising a memory, a processor, and a computer program stored in the memory and capable of running on the processor, wherein when the processor executes the computer program, a surveillance-terminal identification method is implemented, wherein the method comprises:

• determining a target port, wherein the target port is one of a plurality of ports of a network switch;
• performing data monitoring N times in succession on a data flow transmitted through the target port within N set time windows to obtain N sets of corresponding monitoring results, wherein each set of monitoring results comprises at least one traffic status attribute of the data flow, and N is a positive integer;
• performing comprehensive feature extraction on the N sets of monitoring results to obtain a data feature vector of the data flow, wherein the data feature vector represents a traffic distribution of the data flow passing through the target port at different time points within the N time windows;
• and
• obtaining, based on the data feature vector, a terminal type of a target terminal directly connected to the target port.

A non-transitory computer-readable storage medium storing a computer program thereon, wherein when the computer program is executed by a processor, a surveillance-terminal identification method is implemented, wherein the method comprises:

• determining a target port, wherein the target port is one of a plurality of ports of a network switch;
• performing data monitoring N times in succession on a data flow transmitted through the target port within N set time windows to obtain N sets of corresponding monitoring results, wherein each set of monitoring results comprises at least one traffic status attribute of the data flow, and N is a positive integer;
• performing comprehensive feature extraction on the N sets of monitoring results to obtain a data feature vector of the data flow, wherein the data feature vector represents a traffic distribution of the data flow passing through the target port at different time points within the N time windows;
• and
• obtaining, based on the data feature vector, a terminal type of a target terminal directly connected to the target port.