基于网络数据业务流分析的安全事件检测  

Research on Network Security Events Detection based on Network Traffic Anlysis

作　　者：刘鹏[1] 孟炎[1] 魏彬[1] 

机构地区：[1]北京市政务信息安全应急处置中心,北京100101

出　　处：《计算机安全》2013年第3期49-52,共4页Network & Computer Security

摘　　要：提出了一个安全事件检测模型,首先采用统计学的方法对其进行分类并筛选出安全事件相关业务流信息,根据筛选出的业务流转换为图的结构,再应用频繁子图挖掘技术找出已知安全事件的特征模式,根据相应的特征检测网络业务流中的安全事件。This article proposes a model about security events detection. It classifies and filters the network traffic concerned with security events by using statistical methods. ？According the graph structure translated from these network traffic and applying frequent subgraph mining technology, it can find out the network traffic pattern of known security events. Then the patterns can be used to detect security events in network traffic.

关 键 词：网络业务流 频繁子图挖掘 安全事件 

分 类 号：TP393.02[自动化与计算机技术—计算机应用技术]