摘要： 提出了一个基于统计的流量异常检测模型。根据网络流量的可测度集,描绘了一个正常网络流量的基线。参照该正常流量基线,使用假设检验理论进行异常检测。采用一个基于滑动窗口的流量更新策略,使异常检测能够更加高效。论述了在高速网络情况下提高检测性能的方法。

关键词: 异常检测, 网络基线, 滑动窗口

Abstract: The paper presents a traffic anomaly detection model based on statistics.According to the measurable aggregate of network traffic,a normal network baseline is built.Compared to the normal network baseline,the theory of hypothesis test is used to execute the anomaly detection.In order to make the anomaly detection more efficiently,the model adopts a traffic update policy based on glide window.The method of improving detection capability in the high-speed network is also discussed.

中图分类号: 

• TP393.06