| CPC G06N 3/088 (2013.01) [H04L 41/344 (2022.05)] | 25 Claims |

|
1. A method for signaling anomaly detection, the method comprising:
obtaining, by a signaling analysis apparatus, a to-be-detected signaling flow, wherein the to-be-detected signaling flow comprises N pieces of signaling, where N is an integer greater than 1;
performing, by the signaling analysis apparatus, first feature construction on a message type and on an information element that are included in each of the N pieces of signaling to obtain a first feature sequence, the first feature sequence comprising N first feature vectors, the N first feature vectors being in a one-to-one correspondence with the N pieces of signaling;
inputting the first feature sequence to a first signaling anomaly detection model;
performing anomaly detection processing; and
outputting a first anomaly detection result indicating that the to-be-detected signaling flow is normal or abnormal.
|