A method and an apparatus for identifying an abnormal usage of an electronic device are provided. A usage behavior of the electronic device may be monitored. Usage information associated with the usage behavior may be obtained. The usage information may be provided to a personal usage model established for a user of the electronic device. An abnormal usage of the electronic device may be determined based at least on the usage information through the personal usage model. A notification of the abnormal usage may be generated.