基于信息熵技术的网络流量异常监测研究  

Research on Network Traffic Anomaly Detection based on Information Entropy Technology

作　　者：邓小清 Deng Xiaoqing(School of Intelligent Manufacturing,Sichuan University of Arts and Science,Dazhou Sichuan 635000,China)

机构地区：[1]四川文理学院智能制造学院,四川达州635000

出　　处：《信息与电脑》2017年第23期64-65,68,共3页Information & Computer

基　　金：四川省教育厅一般项目(No.16ZB0360)

摘　　要：通过对网络流量的深入分析,可以在掌握网络运行状况的情况下对其异常行为进行挖掘。笔者设计和提出一种基本准实时的流量数据报出机制,设计实现了网络流量监测系统。同时,在结合信息熵技术的网络异常流量挖掘方法的基础上,可以监测网络的运行状况与流量异常情况,提升用户对网络流量实时情况的感知能力。而在人工监测与数据挖掘的基础上,可以有效提升网络异常的检测成功率。Through in-depth analysis of network traffic,we can dig out the abnormal behavior of the network under the condition of the operation of the network.A basic design and real-time traffic data reporting mechanism is proposed in this paper,the network traffic monitoring system is designed and realized.At the same time,based on the network anomaly traffic mining method combining information entropy technology,we can monitor the network operation and traffic anomalies,and enhance users'perception of network traffic real-time.On the basis of artificial monitoring and data mining,the success rate of network anomaly detection can be improved effectively.

关 键 词：流量采集 信息熵 异常流量 流量监测 

分 类 号：TP393.07[自动化与计算机技术—计算机应用技术]