基于Netflow的网络安全态势感知系统研究  

Study of network security situation awareness system based on Netflow

作　　者：赖积保 王慧强[1] 金爽[1] 

机构地区：[1]哈尔滨工程大学计算机科学与技术学院,哈尔滨150001

出　　处：《计算机应用研究》2007年第8期167-169,172,共4页Application Research of Computers

基　　金：高等学校博士学科点专项科研基金项目(20050217007);国防预研重点资助项目(413150702)

摘　　要：综述了网络安全态势感知系统的国内外研究现状;介绍了Netflow基本原理及其数据格式;提出了基于Netflow的网络安全态势感知系统结构;重点研究了实现本系统相关的关键技术。经试验表明,该方法合理可行。The summarization of studying situation in NSSAS all over the world was presented firstly. Basic principles and data formats of Netflow were given. And then the framework of NSSAS based on Netflow was put forward. Key technologies related to building NSSAS prototype were discussed. Test results show that the method is reasonable and feasible.

关 键 词：NETFLOW 网络安全态势感知 采样间隔 负载均衡 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]