ABNORMAL TRAFFIC ANALYSIS METHOD AND APPARATUS BASED ON MODEL TREE ALGORITHM, AND ELECTRONIC DEVICE AND NON-VOLATILE READABLE STORAGE MEDIUM

摘要

Disclosed are an abnormal traffic analysis method and apparatus based on a model tree algorithm, and an electronic device and a non-volatile readable storage medium. The present application relates to the technical field of data processing. The method comprises: acquiring at least one feature value of traffic data to be processed in a blacklist/whitelist, wherein the blacklist/whitelist comprises at least one piece of traffic data to be processed; normalizing the feature value to obtain a normalized feature value; according to an initial weight value, traversing all the normalized feature values by means of an iterative algorithm so as to obtain a weight value corresponding to the traffic data to be processed; and when the weight value is greater than a reference weight threshold value, determining the traffic data to be processed to be abnormal traffic data. By means of the analysis of big data, a black industry user disguised as a whitelist user can be discriminated based on a model tree algorithm, thereby improving the degree of purity of traffic data sent by whitelist users. In summary, the distinguishing of abnormal traffic data included in traffic data is realized, and the degree of purity of traffic data sent by whitelist users is improved.