1. A method for identifying an abnormal application, comprising: executing abnormal applications; obtaining dynamic behavior information of the abnormal applications; inputting the dynamic behavior information of the abnormal applications into a preset detection network; obtaining a behavior rule of the dynamic behavior information via the detection network; and identifying a detected application according to the behavior rule to determine whether the detected application is an abnormal application.