计算机应用与软件2011，Vol.28Issue(6)：135-137,142,4.
利用链路相关性进行网络流量异常检测
EXPLOITING LINK RELEVANCE IN NETWORK TRAFFIC ANOMALY DETECTION
摘要
Abstract
When applied to networks with a big number of links, conventional network anomaly detection methods often raise such problems as high false alarm rate, incomplete detection scope and failure to meet real-time detection demands within high-speed networks. In fact there is usually strong relevance among multiple links. Such relevance reflects the overall trend of link traffics. Therefore they can be used in network traffic anomaly analysis. In this paper PCA-based relevance analysis method is adopted with the study of network traffic anomaly detection to evaluate the network traffic anomaly from relevance among links. Experiment proves its simplicity and effectiveness in large scale traffic anomaly detection.关键词
主成份分析/相关性分析/大规模网络流量/异常检测Key words
Principal component analysis/ Relevance analysis/ Large scale network traffic/ Anomaly detection引用本文复制引用
朱剑,李辉..利用链路相关性进行网络流量异常检测[J].计算机应用与软件,2011,28(6):135-137,142,4.基金项目
上海市科技攻关项目资助(08511501901). （08511501901）
