Disclosure of Invention
The embodiment of the application provides an intelligence analysis method and device based on target behaviors, and solves the problem that correlation analysis cannot be performed on fragmented data in the prior art, so that intelligence analysis results are optimized.
In order to solve the above problem, an embodiment of the present application provides a method for intelligence analysis based on target behavior, which is suitable for being executed in a computing device, and at least includes the following steps:
acquiring a plurality of current behavior data of a target; the plurality of current behavior data comprise target subject data, time data, position data and event data;
classifying each historical behavior data stored in a database according to each current behavior data;
acquiring first associated information of the current behavior data and each historical behavior data in the same category based on an Apriori algorithm, and acquiring second associated information of the current behavior data and each historical behavior data in the same category based on typical correlation analysis, and then taking the first associated information and the second associated information of the same category as an information set;
acquiring a plurality of recommendation indexes of the historical behavior data based on a plurality of recommendation algorithms and the information set; the recommendation algorithm corresponds to the recommendation index one by one;
and weighting each corresponding recommendation index based on the preset weight of each recommendation algorithm to obtain an analysis result.
Further, the classifying, according to each of the current behavior data, each of the historical behavior data stored in the database is specifically:
and classifying the historical behavior data stored in the database based on a K-nearest neighbor algorithm according to the current behavior data.
Further, the method also comprises the following steps:
and when the analysis result is larger than a preset threshold value, pushing the historical behavior data corresponding to the analysis result to the user terminal.
Further, the method also comprises the following steps:
and when negative feedback information sent by the user terminal according to the historical behavior data is received, adjusting the preset weight of each recommendation algorithm according to the negative feedback information.
Further, the plurality of recommendation algorithms at least comprises:
collaborative filtering based recommendation algorithms, association rule based recommendation algorithms, and content based recommendation algorithms.
Further, an intelligence analysis device based on target behaviors is provided, which includes:
the data acquisition module is used for acquiring a plurality of current behavior data of the target; the plurality of current behavior data comprise target subject data, time data, position data and event data;
the data classification module is used for classifying the historical behavior data stored in the database according to the current behavior data;
the data association module is used for acquiring first association information of the current behavior data and each historical behavior data in the same category based on an Apriori algorithm, acquiring second association information of the current behavior data and each historical behavior data in the same category based on typical correlation analysis, and then taking the first association information and the second association information in the same category as an information set;
the data recommendation module is used for acquiring a plurality of recommendation indexes of the historical behavior data based on a plurality of recommendation algorithms and the information set; the recommendation algorithm corresponds to the recommendation index one by one;
and the result analysis module is used for weighting each corresponding recommendation index based on the preset weight of each recommendation algorithm to obtain an analysis result.
Further, the data classification module is specifically configured to:
and classifying the historical behavior data stored in the database based on a K-nearest neighbor algorithm according to the current behavior data.
Further, the method also comprises the following steps:
and the data alarm module is used for pushing the historical behavior data corresponding to the analysis result to the user terminal when the analysis result is greater than a preset threshold value.
Further, the method also comprises the following steps:
and the data adjusting module is used for adjusting the preset weight of each recommendation algorithm according to the negative feedback information when the negative feedback information sent by the user terminal according to the historical behavior data is received.
The embodiment of the application has the following beneficial effects:
according to the information analysis method and device based on the target behavior, after the historical behavior data are classified according to the current behavior data, strong correlation information and weak correlation information between the historical behavior data and the current behavior data are obtained through an Apriori algorithm and typical correlation analysis, so that the intrinsic correlation is established between fragmented data, the subsequently recommended information data are not simple data combination any more, the information analysis result is optimized, and the accuracy, the integrity and the effectiveness of the information analysis are improved.
Detailed Description
The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
Please refer to fig. 1.
Referring to fig. 1, it is a schematic flow chart of an intelligence analysis method based on target behaviors provided in an embodiment of the present application, and as shown in fig. 1, each step is specifically as follows:
in step S11, a plurality of current behavior data of the target are acquired.
The plurality of current behavior data comprise target subject data, time data, position data and event data.
In this embodiment, the target is determined by the user, and may be an individual or an organization, or may be an event. According to the 6W principle, namely: what happens, Where, When, What happens, What participates, Why, How, collecting, extracting, sorting and removing duplication of the whole network resource, obtaining a plurality of current behavior data of the target, and storing the plurality of current behavior data into a relation database, thereby determining the target center.
In step S12, the historical behavior data stored in the database are classified according to the current behavior data.
Specifically, the historical behavior data stored in the database are classified based on a K-nearest neighbor algorithm according to the current behavior data.
In this embodiment, after classifying the current behavior data according to 4 indexes, namely, a target subject index, a time index, a location index and an event index, based on a K-nearest neighbor algorithm, each historical behavior data is classified, and in each category, after selecting a plurality of pieces of historical behavior data whose distance from the current behavior data is within a preset range, the selected plurality of pieces of historical behavior data are sorted into one relational database, thereby reducing the classification workload and improving the efficiency.
In this embodiment, the target subject index is a person, thing, or organization; the time index is the time when the event occurs; the place indexes are places where the events occur, including longitude and latitude, countries, streets and the like; the event index is an event that occurs.
Step S13, based on Apriori algorithm, obtaining first association information between the current behavior data and each historical behavior data in the same category, and based on typical correlation analysis, obtaining second association information between the current behavior data and each historical behavior data in the same category, and then using the first association information and the second association information in the same category as an information set.
In this embodiment, Apriori algorithm is adopted to perform association analysis on each historical behavior data of the same category and the current behavior data of the same category, so as to find out first association information indicating that there is an obvious internal association between the data, which is helpful for early warning of events occurring in the future, and by adopting a typical correlation analysis method, the historical behavior data of each high-dimensional space in the same category and the current behavior data in the same category are mapped to a low-dimensional space, so as to find out second association information indicating that the data are weakly associated, which is helpful for more accurately predicting and sensing future events. For example, each historical behavior data belonging to the target subject index is subjected to correlation analysis with the current behavior data belonging to the target subject index, so that each historical behavior data of the target subject index, and the first correlation information and the second correlation information of the current behavior data of the target subject index are obtained.
On the basis of obtaining the information set, behavior data is searched around a target determined by a user through a fuzzy matching algorithm and an accurate matching algorithm based on a knowledge graph, so that associated historical behavior data is obtained, and the obtained historical behavior data is associated and displayed in combination with data input by the user on a visual interface.
And step S14, acquiring a plurality of recommendation indexes of historical behavior data based on a plurality of recommendation algorithms and information sets.
And the recommendation algorithm corresponds to the recommendation index one by one.
In this embodiment, the information set is used as parameters of a collaborative filtering-based recommendation algorithm, an association rule-based recommendation algorithm, and a content-based recommendation algorithm, so as to obtain a plurality of recommendation indexes of historical behavior data.
And step S15, weighting each corresponding recommendation index based on the preset weight of each recommendation algorithm to obtain an analysis result.
In this embodiment, the existing recommendation algorithm based on collaborative filtering, the recommendation algorithm based on association rules, and the recommendation algorithm based on content are combined, and a plurality of recommendation algorithms are weighted, so as to obtain an analysis result, wherein a specific formula is as follows:
wherein S is an analysis result, n is a recommended algorithm number, and alphaiIs the ith recommendation index, kiIs the ith recommended algorithm weight.
After the historical behavior data are classified according to the current behavior data, strong correlation information and weak correlation information between the historical behavior data and the current behavior data are obtained through an Apriori algorithm and typical correlation analysis, and correlation analysis can be performed on data of all dimensions, so that internal correlation is established between fragmented data, subsequently recommended intelligence data are not simple data combination any more, and intelligence analysis results are optimized.
Please refer to fig. 2.
Further, referring to fig. 2, a flowchart of a method for analyzing intelligence based on target behavior according to still another embodiment of the present application is shown. Besides the flow shown in fig. 1, the method further comprises the following steps:
and step S16, when the analysis result is larger than the preset threshold value, pushing historical behavior data corresponding to the analysis result to the user terminal.
In this embodiment, the historical behavior data is arranged in a descending order according to the size of the analysis result and displayed on the terminal interface, and if the analysis result is greater than 80%, the corresponding historical behavior data is pushed to the user terminal in an alarm state.
According to the embodiment, the corresponding historical behavior data are displayed on the terminal interface in a descending order according to the size of the analysis result, so that a user can browse the data conveniently, and when the analysis result is larger than the preset threshold value, the corresponding historical behavior data are pushed to the user terminal, so that the user can obtain the prediction information with higher accuracy, and the user can take corresponding measures in time according to the information.
Please refer to fig. 3.
Fig. 3 is a schematic flow chart of a method for intelligence analysis based on target behavior according to another embodiment of the present application. In addition to the flow shown in fig. 2, the method further includes:
and step S17, when negative feedback information sent by the user terminal according to the historical behavior data is received, adjusting the preset weight of each recommendation algorithm according to the negative feedback information.
In this embodiment, the preset weight is adjusted by positive and negative feedback adjustment. If positive feedback information sent by a user according to the pushed historical behavior data is received, the pushed data is in accordance with actual expectation; if negative feedback information sent by the user according to the pushed historical behavior data is received, the fact that the difference between the pushed data and an actual result is large is indicated, at the moment, the preset weight of each recommendation algorithm is adjusted according to the negative feedback of the user, for example, the weight of the recommendation algorithm based on collaborative filtering is reduced, the weight of the recommendation algorithm based on the content is increased, and the accuracy of the pushed data is further improved.
The embodiment adjusts the preset weight of the recommendation algorithm in real time according to the information fed back by the user, and solves the problem that the intelligence analysis accuracy is low due to the fact that the fixed preset weight is used, so that the predicted data are more accurate, and the accuracy is higher along with the increase of the user feedback information.
Please refer to fig. 4.
Further, refer to fig. 4, which is a schematic structural diagram of an intelligence analysis apparatus based on target behavior according to an embodiment of the present application. The method comprises the following steps:
thedata obtaining module 101 is configured to obtain a plurality of current behavior data of the target.
The plurality of current behavior data comprise target subject data, time data, position data and event data.
And thedata classification module 102 is configured to classify each historical behavior data stored in the database according to each current behavior data.
Specifically, thedata classification module 102 is configured to classify, according to each current behavior data, each historical behavior data stored in the database based on a K-nearest neighbor algorithm.
Thedata association module 103 is configured to obtain first association information between the current behavior data and each historical behavior data in the same category based on an Apriori algorithm, obtain second association information between the current behavior data and each historical behavior data in the same category based on a typical correlation analysis, and use the first association information and the second association information in the same category as an information set.
And thedata recommendation module 104 is configured to obtain a plurality of recommendation indexes of the historical behavior data based on a plurality of recommendation algorithms and information sets. And the recommendation algorithm corresponds to the recommendation index one by one.
And theresult analysis module 105 is configured to weight each corresponding recommendation index based on the preset weight of each recommendation algorithm to obtain an analysis result.
After the historical behavior data are classified according to the current behavior data, strong correlation information and weak correlation information between the historical behavior data and the current behavior data are obtained through an Apriori algorithm and typical correlation analysis, and correlation analysis can be performed on data of all dimensions, so that internal correlation is established between fragmented data, subsequently recommended intelligence data are not simple data combination any more, and intelligence analysis results are optimized.
Please refer to fig. 5.
Fig. 5 is a schematic structural diagram of an intelligence analysis apparatus based on target behavior according to still another embodiment of the present application. In addition to the structure shown in fig. 4, the method further includes:
and thedata alarm module 106 is configured to, when the analysis result is greater than a preset threshold, push historical behavior data corresponding to the analysis result to the user terminal.
According to the embodiment, the corresponding historical behavior data are displayed on the terminal interface in a descending order according to the size of the analysis result, so that a user can browse the data conveniently, and when the analysis result is larger than the preset threshold value, the corresponding historical behavior data are pushed to the user terminal, so that the user can obtain the prediction information with higher accuracy, and the user can take corresponding measures in time according to the information.
Please refer to fig. 6.
Fig. 6 is a schematic structural diagram of an intelligence analysis apparatus based on target behavior according to still another embodiment of the present application. In addition to the structure shown in fig. 5, the structure further includes:
and thedata adjusting module 107 is configured to, when receiving negative feedback information sent by the user terminal according to the historical behavior data, adjust the preset weight of each recommendation algorithm according to the negative feedback information.
The embodiment adjusts the preset weight of the recommendation algorithm in real time according to the information fed back by the user, and solves the problem that the intelligence analysis accuracy is low due to the fact that the fixed preset weight is used, so that the predicted data are more accurate, and the accuracy is higher along with the increase of the user feedback information.
Yet another embodiment of the present application further provides a targeted behavior based intelligence analysis terminal device, which includes a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, wherein the processor implements the targeted behavior based intelligence analysis method according to the above embodiment when executing the computer program.
The foregoing is a preferred embodiment of the present application, and it should be noted that, for those skilled in the art, various modifications and decorations can be made without departing from the principle of the present application, and these modifications and decorations are also regarded as the protection scope of the present application.
It will be understood by those skilled in the art that all or part of the processes of the methods of the embodiments described above can be implemented by a computer program, which can be stored in a computer-readable storage medium, and when executed, can include the processes of the embodiments of the methods described above. The storage medium may be a magnetic disk, an optical disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), or the like.