基于网络流量自相似性的入侵检测技术  

The Technology of Instusion Detection Based on Network Traffic Self-similar

作　　者：陈宏聪[1] 朱华鑫[1] 

机构地区：[1]广东交通职业技术学院网络中心,广东广州510650

出　　处：《计算机安全》2010年第6期43-45,共3页Network & Computer Security

摘　　要：提出一种根据网络业务自相似性对网络流量进行异常检测和判断的方法,从而为及时、准确地判断和制止大规模DDoS攻击的发生提供了新的手段。和传统的方法相比,该方法不需要对分组内容进行检测,效率较高,可用于大流量网络节点的DDoS攻击检测和防范工作。Bringing up a method for abnormity detection of network traffic,which is based on the theory of network self-similarity.This method provided a new way to detect and prevent DDOS attack duly and precisely.Compared with the traditional anti-DDOS method,it doesn’t need to inspect the content of the packet,so it has more efficiency and can be used on the node with huge traffic.In next step we’ll optimize the method further and construct a whole set of mechanism in DDOS detecting and blocking based on it.

关 键 词：网络流量 DDOS 自相似性 网络入侵检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]