旁路模式下网络异常流量监控模块的设计与实现  

Design and implementation of abnormal network flow monitoring module based on the bypass

作　　者：石贵民[1] 

机构地区：[1]武夷学院数学与计算机系,福建武夷山354300

出　　处：《佛山科学技术学院学报（自然科学版）》2013年第6期37-42,共6页Journal of Foshan University(Natural Science Edition)

基　　金：福建省科技计划重点项目(2011Y0049);福建省教育厅A类科技项目(JA10272);武夷学院海西科技项目(XH201004);武夷学院国家级大学生创新训练项目(201210397007)

摘　　要：针对局域网络环境下,网管人员很难有效监控网络数据的异常流量问题,在基于旁路的网络流量监控模式基础上,设计并实现了Guard这一旁路模式下抗攻击设备的主要功能。Guard通过自学习方式对应用层流量进行监测,从带宽和连接数等多个纬度,实现了对网络资源的合理分配和对异常流量的有效控制。In Local Area Network environment, it is difficult for network administrator to effectively monitor the abnormal flow of network data. On the basis of network flow monitoring mode based on the bypass, the main function of the anti-attack equipment for bypass mode, Guard is designed and implemented. Guard monitors the application layer traffic through self-learning and achieves the reasonable allocation of network resources and effective control of abnormal traffic in multiple directions such as band width and number of nodes.

关 键 词：旁路模式 异常流量 监控 系统实现 

分 类 号：TP393.03[自动化与计算机技术—计算机应用技术]