一种基于节点实时流量的异常检测算法

针对无线传感器节点缺乏移动性和可预知的流量模式等特征,从而难以在传感器网络中进行异常检测的问题,该文提出了一种基于节点的实时异常检测算法.根据节点流量的到达过程,提出了一种新的节点流量到达模型,根据多层次的滑动窗口事件存储原理,将动态统计值进行短时间的保持,对不同时间段的到达过程指标进行比较,包括节点的可计算资源,低复杂度,融合特性等,以此来判别流量到达过程是否发生异常,从而对传感器网络进行有效的异常检测.

An Anomaly Detection Algorithm Based on Real-Time Node Flow

Sensor nodes have specific properties such as lack of mobility and relatively predictable traffic patterns which can not allow for detection of anomalies in their networking behavior.In this paper we introduce a real-time,node-based anomaly detection algorithm that observes the arrival processes experienced by a sensor node.A new arrival model for the traffic is developed which can be received by a sensor node and devise a scheme to detect anomalous changes in this arrival process.The detection algorithm ke...