浅析面向网络空间安全的流量异常检测技术  

A Brief Analysis of Traffic Anomaly Detection Technology oriented Cyberspace Security

作　　者：田鹤 王彦超 孟宪伟 费如纯 高艳 TIAN He;WANG Yan-chao;MENG Xian-Wei;FEI Ru-chun;GAO Yan(School of Sugon Big Data,Liaoning Institute of Science and Technology,Benxi Liaoning 117004,China)

机构地区：[1]辽宁科技学院曙光大数据学院,辽宁本溪117004

出　　处：《辽宁科技学院学报》2022年第6期34-36,40,共4页Journal of Liaoning Institute of Science and Technology

基　　金：辽宁省教育厅基本科研项目(面上项目)(LJKZ1065).

摘　　要：现如今互联网的飞速发展使得网络应用不断扩展,网络空间应运而生。网络传输业务流量日趋增加,各种攻击事件和网络异常现象更是层出不穷,如何有效地监测网络异常行为和网络异常流量是当前网络空间安全面临的严峻问题。文章从网络流量异常检测建模方法和网络流量异常检测方法来解析常用的异常检测技术,讨论目前网络流量异常检测技术的问题与挑战以及异常检测技术进一步的研究方向。Nowadays, with the rapid development of the Internet, network applications continue expanding, and cyberspace comes into being. Network transmission traffic is increasing day by day, and various attack events and network anomalies are emerging in an endless stream. How to effectively monitor network abnormal behavior and network abnormal traffic therefore becomes a serious problem facing the current cyberspace security. In this paper, the common anomaly detection techniques from network traffic anomaly detection modeling methods are analyzed, aiming at discussing the problems and challenges of current network traffic anomaly detection techniques and the further research directions of anomaly detection techniques in the future.

关 键 词：异常检测 网络流 网络空间安全 异常流量 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]