摘要： 针对当前网络攻击的特点,利用基于NetFlow协议的高性能数据采集模式并结合分布分析、频度分析等流量分析手段,实现了一种通过NetFlow流量分析发现网络攻击行为的方法。
关键词:
网络攻击,
NetFlow,
分布分析,
频度分析
Abstract: According to the characteristic of current network attack , this paper realizes one kind of method for discovering network attack behavior by using the high performance data-collecting method based on NetFlow protocol and the traffic analysis technique such as distribution analysis, frequency analysis.
中图分类号:
杨嵘,张国清,韦卫,李仰耀. 基于NetFlow流量分析的网络攻击行为发现[J]. , 2005, 31(13): 146-.
YANG Rong 1,2, ZHANG Guoqing 1, WEI Wei 3, LI Yangyao 1,2. Discovery of Network Attack Behavior Based on NetFlow Traffic Analysis[J]. , 2005, 31(13): 146-.