摘要
异常网络行为给网络安全管理带来了难题,网络行为异常检测对于维护网络运行的正常秩序具有重要意义,已成为网络安全管理研究的热点。文章分析了异常网络行为的危害和产生原因,介绍了其典型的几种产生根源,概述了网络行为异常检测相关的几个研究领域:网络测量、网络行为建模、网络行为分析、网络流量异常检测和智能检测,综述了这几个领域的国内外研究现状,探讨了当前的研究难点,并对未来的研究方向进行了展望。
Abnormal network behaviors pose difficulties for the network security management. Anomalydetection for network behaviors is significant for maintaining normal orders of network operation and hasbeen one of the hotspots of the researches on the network security management. In this paper, the harmnessand origin of abnormal network behaviors are analyzed and some typical origins are introduced. What’ smore, a sketch of the status quo of several research fields at home and abroad related to the anomaly detection of network behaviors is stated herein, such as network measurement, network behavior modeling, network behavior analyzing, anomaly detection for network traffic and intelligent detection. Current difficultiesin researches are also analyzed and an outlook for further study is proposed herein.
出处
《乐山师范学院学报》
2017年第12期34-40,共7页
Journal of Leshan Normal University
基金
四川省应用基础研究计划项目"基于免疫的大规模网络行为异常检测技术研究"(2015JY0105)
乐山师范学院培育项目"基于免疫的大规模分布式拒绝服务行为监测技术研究"(Z1415)
乐山师范学院教改项目"离散数学与数据结构课程的协同教学模式探索"(JG2015-ZF29)
关键词
网络行为
异常检测
网络测量
网络流量
智能检测
Network Behavior
Anomaly Detection
Network Measurement
Network Traffic
Intelligent Detection
