计算机应用与软件2011，Vol.28Issue(4)：186-188,3.
基于概要数据结构的网络异常检测方法
SKETCH DATA STRUCTURE BASED NETWORK ANOMALY DETECTION METHOD
摘要
Abstract
The article proposes a sketch data structure based network anomaly detection method. It analyzes high speed network data with pyramid time model and extracts sketch by singular entropy,collects the variation trend of data structure eigenvalae during a certain period,calculates its average and gradient values as well as its correspondent alarm scope. When alarm appears, the method can draw out exceptional IP addresses. Experiments prove that the method is effective in network anomaly detection.关键词
概要数据结构/金字塔时间模型/奇异熵/异常检测Key words
Sketch data structure/ Pyramid time model/ Singular entropy/ Anomaly detection引用本文复制引用
龙门,夏靖波,张子阳..基于概要数据结构的网络异常检测方法[J].计算机应用与软件,2011,28(4):186-188,3.基金项目
陕西省自然科学基金项目(2009JM8001-1). （2009JM8001-1）
