| 摘要 |
The invention relates to a method, device (24) in a network node of a communication network (N) and computer program products for determining deviating behaviour of a user terminal (10). According to the invention the device (24) obtains a first group of event data sets (EDS1) and a second group of event data sets (EDS2, EDS4), where each group includes at least one event data set. Each event data set in the first group includes user terminal generated event data related to events in a specific user terminal (10) and each event data set in the second group includes network generated event data related to the specific user terminal. The device then performs a comparison involving the first group of event data sets and the second group of event data sets and determines the existence of deviating behaviour of the user terminal based on the comparison.
|
