期刊文献+

季节时间序列法在IP网异常流量检测的应用 被引量:1

Anomaly detection application on IP backbone using time series forecast.
在线阅读 下载PDF
导出
摘要 针对TCP/IP骨干网,利用NetFlow技术,提出一种基于业务流量周期规律特性的建模与异常检测方法。该方法通过挖掘骨干网主要业务流量的规律性,结合时间序列分析方法,有效地预测流量的变化趋势,避免了对复杂的流量非线性趋势进行建模分析。 An approach,using Netflow technology,to model service traffic and anomaly detection on IP backbone in the perspective of periodic traffic feature is proposed.This method avoids the difficulty to model the uncertainty and nonlinear facts in traffic data and provides more accurate information than the thresholds-based detection method.
出处 《计算机工程与应用》 CSCD 北大核心 2008年第7期144-147,共4页 Computer Engineering and Applications
关键词 IP骨干网 Nefflow DOS/DDOS 异常检测 IP backbone Netflow Dos/DDos anomaly detection
  • 相关文献

参考文献5

  • 1邹柏贤.一种网络异常实时检测方法[J].计算机学报,2003,26(8):940-947. 被引量:43
  • 2Maxion R A.Anomaly detection for diagnosis[C]//Proceedings of the 20th International Symposium Fault Tolerant Computing, 1990: 20-27.
  • 3Lawrence H L,Cavuto D J,Papavassiliou S,et al.Adaptive and automated detection of service anomalies in transactionoriented WAN's:network analysis,algorithms,implementation,and deployment[J]. IEEE Journal of Selected Areas in Communications,2000, 18 (5) : 744-757.
  • 4吕述望,刘恒,沈昌祥.TCP/IP骨干通信网流量规律性及异常检测方法[J].北京邮电大学学报,2005,28(6):1-4. 被引量:2
  • 5Vern P,Sally F.Wide area traffic:the failure of poissonmodeling[J]. IEEE/ACM Transactions on Networking, 1995,3:226-244.

二级参考文献16

  • 1Throttan M, Ji C. Adaptive thresholding for proactive network problem detection. In: IEEE International Workshop on Systems Management, Newport, Rhode Island, 1998. 108-116.
  • 2Maxion R A. Anomaly detection for diagnosis. In: Proceedings of the 20th International Symposium Fault-Tolerant Computing(FTCS-20), 1990. 20-27.
  • 3Maxion R A, Feather F E. A case study of Ethernet anomalies in a distributed computing environment. IEEE Transactions on Reliability, 1990, 39(4): 433-443.
  • 4Lawrence Ho L, Cavuto D J, Papavassiliou S, Zawadzki A G.Adaptive and automated detection of service anomalies in trans-action-oriented WAN's: Network analysis, algorithms, implementation, and deployment. IEEE Journal of Selected Areas in Communications, 2000, 18(5): 744-757.
  • 5Hood C S, Ji C. Beyond thresholds: An alternative method for extracting information from network measures. In: Proceedings of IEEE Globecom Conference, Phoenix, Arizona, 1997.487-491.
  • 6Ward A, Glynn P, Kathy Richardson. Internet service performance failure detection. Performance Evaluation, 1998, 26(3) : 38-44.
  • 7Alarcon-Aquio V, Barria J A. Anomaly detection in communication networks using wavelet. IEE Proceeding-Communication, 2001, 148(6): 355-362.
  • 8Huang P, Feldmann A, Willinger W. A non-intrusive, wavelet-based approach to detecting network performance problems.In: Proceedings of ACM SIGCOMM Internet Measurement Workshop, San Francisco Bay Area, 2001.
  • 9Mehdi Nassehi. Anomaly detection for Markov models. IBM Research Division, Zurich Research Laboratory, Ruschlikon,Switzerland: Research Report RZ 3011 ( # 93057), 1998.
  • 10Dixon W J, Massey F J. Introduction to Statistical Analysis.3rd Edition. New York, NY: McGraw-Hill Book Company,1983.

共引文献43

同被引文献8

引证文献1

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部