Information analysis method and information analysis device

Abstract

The invention discloses an information analysis method and an information analysis device. The information analysis method is used for processing at least one of data screening, data analysis, data statistics, and data mining to volume log information. The information analysis method comprises the following steps: acquiring contents, numbers and loading sequences of at least one function plug-in unit which needs to be loaded through a configuration file; loading a specified corresponding function plug-in unit in the configuration file through at least one slot interface on a plug-in unit frame according to the loading sequence arranged in the configuration file; starting to receive data after the function plug-in units which need to be loaded are loaded completely; the received data sequentially pass through the loaded function plug-in unit, and mutually and coordinately complete corresponding functions of each function plug-in unit; and outputting data processed by the corresponding function plug-in unit of a last slot interface in an assembly line.

Description

technical field [0001] The present invention relates to the technical field of data services, in particular to data or information analysis, statistics and mining, and in particular to an information analysis method and equipment thereof through the arbitrary combination of multiple analysis methods in a pipelined manner. Background technique [0002] With the increasing business volume involving the mobile department, its internal safety hazards also increase, and the supervision of internal personnel has increasingly become one of the key tasks of the mobile department. The log (log) analysis system is to extract valuable information from massive log information, so as to determine whether there is any illegal operation, and track down the person responsible for the illegal operation. [0003] At present, the log analysis system in use can meet some primary analysis requirements, such as the first-phase specification of China Mobile Group's 4A analysis system. This method...

AI Technical Summary

Problems solved by technology

[0006] First, the information analysis strategy supported by the existing model is relatively simple, just querying the database with keywords

In this way, in fact, such an information analysis model only completes a filtering function for database data

[0007] Second, the statistical function cannot be completed

For example, it is not supported to count the events of more than 10 different IP logins of the same account within a certain day

In this way, the practicality of the information analysis model is greatly limited

[0008] Third, it is impossible to dig out the connection between scattered events

Existing analysis models cannot correlate these seemingly unconnected events at all, which greatly reduces the effectiveness of mining violations

[0009] Fourth, the configuration is not flexible enough to carry out multi-level and multi-dimensional information analysis strategy configuration

Images