The model adopts a hierarchical structural frame, and the Whole system is divided into four levels: data collecting, data processing, detection matching and alert processing.