Abstract: A method for selecting a recommended node in a behavior deviation model includes: determining a candidate path starting from a delegation node to a target node based on a preset network topology; determining candidate recommended nodes passing through each candidate path, and acquiring a first behavior deviation corresponding to the target node at each candidate node; reading a second behavior deviation of each candidate recommended node from a central node in the network topology; calculating an average deviation value for the target node based on second behavior deviations and first behavior deviations; determining a candidate path with the smallest average deviation value as a target candidate path; and in response to the average deviation value of the target candidate path being less than or equal to a preset warning value, determining the candidate recommended node on the target candidate path as a recommended node.