网络流量异常检测及分析的研究

网络流量异常检测及分析是网络异常监视及响应应用的基础,是网络及安全管理领域的重要研究内容.本文探讨了网络流量数据类型、网络流量异常种类;从流量异常检测的范围、流量异常分析的深度、在线和离线异常检测方式等方面归纳了流量异常检测的研究内容;综述了已有的研究工作针对不同应用环境和研究内容所采用的不同的研究方法和技术手段,并分析了各种研究方法的特点、局限性和适用场合等;最后本文还对现有研究工作存在的问题及有待于进一步研究的课题进行了探讨.

Research on Anomaly Detection and Analysis Based on Network Traffic

Anomaly detection and analysis based on network traffic are used to monitor and locate network anomalies for network and security management.In this paper,we list 3 types of network traffic data and various kinds of traffic anomalies.After that,the research work related to the scope of traffic anomaly detection,the depth of traffic anomaly analysis and the online/offline detection is presented.The research ways and techniques about the available research work are summarized,at the same time the limitations ...