试论网络流量异常分析现状及问题  

Analysis of Network Traffic Anomalies Status and Problems

作　　者：张敏[1] 

机构地区：[1]绍兴市中等专业学校,绍兴312000

出　　处：《电脑编程技巧与维护》2010年第8期74-75,106,共3页Computer Programming Skills & Maintenance

摘　　要：目前,Internet已经进入高速率骨干网和高速率接入网的阶段,因此需要实时地监控网络流量并检测出有攻击意向的异常,及时采取适当的行动来遏制它进一步的繁殖和传播。本文主要分析了现有网络异常分析的四种方法,并进行对比;提出了基于Netflow的异常流量分离设计思想,对于今后网络流量异常检测分析具有一定作用。At present,Internet has entered the high-speed backbone network and the stage of high-speed access networks,requiring real-time monitoring of network traffic and detect abnormal intention to attack,take appropriate and timely action to curb its further propagation and dissemination.This paper analyzes the existing network anomaly analysis of the four methods,and compared.Then put forward the abnormal flow of Netflow-based separation of design ideas,for future analysis of network traffic anomaly detection has a role.

关 键 词：网络流量检测 网络异常 NETFLOW 

分 类 号：TP393.06[自动化与计算机技术—计算机应用技术]