Abstract: System and methods for performing behavior evaluation based on an immunity system is provided. A method may include receiving historical behavior data containing user activities performed in an electronic transaction. The method may include extracting normal transaction sequences and abnormal transaction sequences from the historical behavior data. The method may include storing the normal transaction sequences into a normal transaction library and the abnormal transaction sequences into an abnormal transaction library. The method may further include, in response to receiving a current behavior data, extracting a current transaction sequence from the current behavior data, and in response to a successful matching comparison of the current transaction sequence with an abnormal transaction sequence in the abnormal transaction library, transmitting a first abnormal evaluation result as a response to the receiving of the current behavior data.

Abstract: An immunization detection method for a user behavior mode in an electronic transaction process, comprising a data preprocessing step of mainly processing a user operation process into a sequence format and cleaning related repeated data; a training step of mainly calculating an age value of each sequence according to a time order and according to an age evolution process, deleting aged logs according to the age values and extracting a normal sequence library; a detection step of mainly detecting whether a newly generated transaction sequence is mutated or not; and an updating step of updating age values of selves and non-selves in time according to a detection result and updating a related library set. The method is oriented to abnormal situations in the electronic transaction process, which may be misoperation by users.