基于孤立森林算法的移动警务网络流量监测方法研究  

Research on Mobile Police Network Traffic Monitoring Method Based on Isolated Forest Algorithm

作　　者：袁艺芳 李雁[2] 陈绪[2] 高永龙[2] 席新 薛京生 YUAN Yi-fang;LI Yan;CHEN Xu;GAO Yong-long;XI Xin(Science and Technology Information Bureau of the Ministry of public security 100005,China;Tianjin Public Security Bureau Science and Technology Information Office 300393,China)

机构地区：[1]公安部科技信息化局,北京东城100005 [2]天津市公安局科技信息化总队,天津西青300393 [3]不详

出　　处：《软件》2019年第12期229-232,共4页Software

基　　金：公安部技术研究计划项目(批准号:2018JSYJA09)

摘　　要：本文针对移动警务网络复杂多变、数据量大的特点,提出一种基于孤立森林算法的网络流量监测方法。该方法以网络IP数据流为基础,通过对IP数据流提取特征参数,并将特征参数作为输入向量,利用孤立森林算法进行训练以实现监测。这种方法能够快速、有效地检测出移动警务网络中的异常流量,精确率高,在一定程度上对移动警务网络的智能运维和安全防护起到重要作用。Mobile police network is complicated and changeable,and it has a very large amount of data to be handled.According to these characteristics,a network traffic monitoring method based on isolated forest algorithm is proposed in this paper.This method is based on the IP network data.Feature parameters are extracted for each IP data flow,and the feature parameters are taken as the input vectors for isolated forest algorithm to train isolated trees and achieve monitoring.This method can detect abnormal traffic in mobile police network quickly and effectively,which can play an important role in intelligent operation and security protection of mobile police network.

关 键 词：孤立森林 算法 移动警务 网络 流量监测 

分 类 号：TP391.0[自动化与计算机技术—计算机应用技术]