试论网络流量异常分析现状及问题

目前,Internet已经进入高速率骨干网和高速率接入网的阶段,因此需要实时地监控网络流量并检测出有攻击意向的异常,及时采取适当的行动来遏制它进一步的繁殖和传播。本文主要分析了现有网络异常分析的四种方法,并进行对比;提出了基于Netflow的异常流量分离设计思想,对于今后网络流量异常检测分析具有一定作用。

Analysis of Network Traffic Anomalies Status and Problems

At present,Internet has entered the high-speed backbone network and the stage of high-speed access networks,requiring real-time monitoring of network traffic and detect abnormal intention to attack,take appropriate and timely action to curb its further propagation and dissemination.This paper analyzes the existing network anomaly analysis of the four methods,and compared.Then put forward the abnormal flow of Netflow-based separation of design ideas,for future analysis of network traffic anomaly detection ha...