作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2007, Vol. 33 ›› Issue (12): 114-116,. doi: 10.3969/j.issn.1000-3428.2007.12.040

• 网络与通信 • 上一篇    下一篇

基于主成分分析的网络流相关性研究

叶 麟,张宏莉,何 慧   

  1. (哈尔滨工业大学计算机网络与信息安全技术中心,哈尔滨 150001)

  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2007-06-20 发布日期:2007-06-20

Research of Network Flow Correlation Based on Principal Components Analysis

YE Lin, ZHANG Hongli, HE Hui   

  1. (Computer Network and Information Security Technology Center, Harbin Institute of Technology, Harbin 150001)
  • Received:1900-01-01 Revised:1900-01-01 Online:2007-06-20 Published:2007-06-20

摘要: 网络流量是由主机间的大量连接组成,并且包含各种各样的数据。大部分研究集中在整体流量的统计性质上,忽视了整体流量中不同网络流之间的微观关系。该文从微观的角度将整体流量进行分析,找出了基于源和目的IP地址的网络流之间的关系,研究了正常网络流和攻击网络流在相关性上的不同。

关键词: 网络流, 主成分分析, 特征值, 特征向量

Abstract: Network traffic is composed of many connections between hosts, which send all kinds of traffic data. Most studies focus on the statistic of integrated traffic, ignoring the microscopic relationship of different network flows. The paper focuses on analyzing the integrated traffic in a microscopic view, trying to find the relationship of network flows which are based on source and destination IP addresses and studying the difference of normal network flows and attack network flows in correlation.

Key words: Network flow, Principal components analysis, Eigenvalue, Eigenvector

中图分类号: