Abstract: This application discloses a device authentication method and system, and an apparatus, and relates to the field of communication technologies, to perform authentication on a terminal device. The system includes a first analyzer, a second analyzer, and a network device. The first analyzer sends a first authentication model to the second analyzer. The network device sends a transmission feature of a first terminal device to the second analyzer. The second analyzer performs authentication on the first terminal device based on the transmission feature of the first terminal and the first authentication model.

Abstract: The technology of this disclosure relates to a method, an apparatus, a device, a storage medium, and a system for determining a collection period. The technology relates to the field of machine learning technologies. In this disclosure, a machine learning model is obtained by using a training dataset collected based on candidate collection periods of X features, and a candidate collection period of each of the X features is determined as a target collection period of each feature based on the obtained machine learning model and a first condition. Because the target collection period of each feature is greater than a minimum collection period of each feature, subsequently, if data is collected based on the target collection period of each feature, an amount of the collected data is reduced, to reduce collection load of a device and memory occupied by sampled data, thereby reducing time redundancy.

Abstract: This application provides a method, an apparatus, and a system for determining data flow information. The method includes: obtaining flow parameters of a plurality of data flows within a first time period; obtaining at least one data flow group according to the flow parameters of the plurality of data flows and a flow parameter rule of at least one preset access mode, where a relationship between data flows in each data flow group satisfies a flow parameter rule of one preset access mode; and determining group parameters of each data flow group.

Abstract: A device identification method, apparatus, and system are provided. A management device or a collection device first determines a network traffic feature of a to-be-identified device based on a first dataset. The first dataset includes a plurality of pieces of first data, and each piece of first data includes a data amount of a data packet that is of the to-be-identified device and that is collected within one first periodicity. Then, the management device or the collection device determines a device type of the to-be-identified device based on a device identification model and the network traffic feature of the to-be-identified device.

Abstract: A method, an apparatus, a system, a device, and a storage medium for implementing terminal verification are provided. In this method, a transmission feature of a terminal is reconstructed to verify the terminal. For example, if a difference between the transmission feature obtained through reconstruction and the transmission feature of the terminal is relatively large, it indicates that the transmission feature of the terminal is abnormal, and the terminal is an abnormal terminal. In this case, it is determined that the verification of the terminal fails.

Abstract: This application provides a data collection method and a device. A data collection device determines, based on a threshold corresponding to a target indicator, a collection interval for to-be-collected data of the target indicator from a plurality of available collection intervals; and the data collection device collects the data of the target indicator based on the collection interval.

Abstract: Embodiments of this application describe a retransmission timeout (RTO) determining method and a related apparatus. The method includes a transmission device sending, to a network analyzer, a network throughput at which communication is performed through a first communication connection, where the network throughput is used by the network analyzer to determine an RTO corresponding to the first communication connection. The network analyzer obtains a first network throughput at which the transmission device performs communication through the first communication connection. The network analyzer calculates, based on the first network throughput, a first RTO corresponding to the first communication connection. The network analyzer sends the first RTO to the transmission device. The transmission device receives the first RTO sent by the network analyzer. The embodiments of this application help improve efficiency of retransmitting a lost data packet.