| 摘要 |
Embodiments of the present invention disclose a user behavior analysis method, and a related device and system. The user behavior analysis method is applied to a UBA cloud including at least one UBA cloud server, where the UBA cloud server is at an analysis and decision making layer of a network in which the UBA cloud server is located, and the method includes: receiving, by a UBA cloud server, a network content identifier reported by a first UBA subnode, where the network content identifier cannot be identified by the first UBA subnode; acquiring network content corresponding to the network content identifier; extracting a keyword from the network content; updating a behavior knowledge base by using the extracted keyword; and delivering, by the UBA cloud server, the updated behavior knowledge base or updated content of the behavior knowledge base to a UBA subnode set, where the UBA subnode set at least includes a second UBA subnode and the first UBA subnode, where the second UBA subnode and the first UBA subnode are at a probe layer of the network in which the UBA cloud server is located. The solutions of the embodiments of the present invention help improving a user behavior analysis capability and reducing a problem of repeated analysis. |
