MONITORING METHOD AND APPARATUS

摘要

Provided is a monitoring method, comprising: configuring a monitoring rule, wherein the monitoring rule comprises a rule duration, a traffic suspicious threshold, a statistical duration, and a threshold of suspicious record times, and the rule duration is shorter than the statistical duration; acquiring the times that the user executes a monitored operation within the rule duration, comparing the times that the user executes the monitored operation within the rule duration with the traffic suspicious threshold, and judging that the user triggers the suspicious threshold when the number of times is larger than or equal to the traffic suspicious threshold; and acquiring the times that the user triggers the suspicious threshold within the statistical duration, comparing the times that the user triggers the suspicious threshold within the statistical duration with the threshold of suspicious record times, and judging that the user is a rule-violating user when the number of times is larger than or equal to the threshold of suspicious record times. Also disclosed is a monitoring apparatus. The present invention can effectively monitor the users sending a certain number of short messages in one unit of time but sending spam short messages constantly over an extended period of time.