作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2012, Vol. 38 ›› Issue (5): 139-141. doi: 10.3969/j.issn.1000-3428.2012.05.042

• 安全技术 • 上一篇    下一篇

Linux系统异常监控模型研究

薛 冰,何 燚   

  1. (河南城建学院计算机科学与工程系,河南 平顶山 467036)
  • 收稿日期:2011-07-25 出版日期:2012-03-05 发布日期:2012-03-05
  • 作者简介:薛 冰(1979-),男,讲师、硕士,主研方向:嵌入式系统,信息安全;何 燚,讲师、硕士
  • 基金资助:
    河南省重点科技攻关计划基金资助项目(102102210020)

Research on Exception Monitoring Model for Linux System

XUE Bing, HE Yi   

  1. (Department of Computer Science and Engineering, Henan University of Urban Construction, Pingdingshan 467036, China)
  • Received:2011-07-25 Online:2012-03-05 Published:2012-03-05

摘要: 设计Linux系统异常监控模型。根据WN协议,当异常发生时,通过该协议将告警信息向其他多个主机传递。采用主元分析,并结合霍特林统计量及Q统计量对异常进行检测。在异常发生后,利用主元贡献图定位异常点。实验结果表明,该模型具有较高的异常监控准确率。

关键词: 异常监控, 主元分析, 告警传递, 贡献图

Abstract: This paper designs exception monitoring model for Linux system. The Warn Notify(WN) protocol is designed for the model. When an exception occurs, the adoption of the protocol can be alarm information to be passed to other multiple hosts. Model uses Principal Component Analysis(PCA) combined with Hotelling’s statistics and Q statistic for anomaly detection. After an exception occurs, the contribution plots getting by principal component method is used to target a specific detection point. Experimental results show that the model has high abnormal monitoring accuracy.

Key words: exception monitoring, Principal Component Analysis(PCA), alarm transmission, contribution plots

中图分类号: