FB-NBAS:一种基于流的网络行为分析模型  

FB-NBAS: A Flow-based Network Behavior Analysis Model

作　　者：李军[1] 曹文君[1] 李杨[1] 

机构地区：[1]复旦大学软件学院,上海200433

出　　处：《计算机工程》2008年第3期165-167,共3页Computer Engineering

摘　　要：传统的入侵检测系统通常需要对攻击预先了解,在流量分析和异常检测方面存在不足。该文提出一种新的基于流的统计分析模型,通过构建网络的行为特征库,实时监测和发现网络异常,基于该分析技术设计和实现了一个网络监控系统原型。该原型可以监测和发现网络中可疑代码,并进行实时跟踪。Traditional Intrusion Detection Systems（IDSs） requires prior knowledge of attacks, loses effectiveness in flow analysis and abnormity detection. This paper proposes a new flow-based network behavior analysis model, which monitors and detects abnormity of network by building up a network behavior features base for each host. Based on this technology, a network monitor prototype system is designed and implemented. The system can detect malicious codes and track them in real time.

关 键 词：网络监控 网络行为 行为分析 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]