Signaling analysis methods and apparatus are provided to obtain a to-be-detected signaling flow that includes N pieces of signaling. First feature construction is performed on a message type and an information element that are included in each of the N pieces of signaling to obtain a first feature sequence. The first feature sequence includes N first feature vectors which are in a one-to-one correspondence with the N pieces of signaling. The first feature sequence is input to a first signaling anomaly detection model to perform anomaly detection processing. A first anomaly detection result is produced indicating that the to-be-detected signaling flow is normal or abnormal. In this way, an anomaly caused due to an information element error can be covered. The method and the apparatus can be multiplexed between different protocols.