基于主动策略的校园网络流量异常监测方法  

Abnormal Monitoring Method of Campus Network Traffic Based on Active Strategy

作　　者：崔钰[1] CUI Yu(Nanjing Vocational Institute of Railway Technology,Nanjign Jiangsu 210031,China)

机构地区：[1]南京铁道职业技术学院,江苏南京210031

出　　处：《信息与电脑》2023年第13期34-36,共3页Information & Computer

基　　金：2022年度江苏省高校哲学社会科学研究思政专项项目“‘互联网+’安全教育对高校安全感指数的影响研究”(项目编号:2022SJSZ0332)。

摘　　要：在进行网络流量异常监测时,一般采用被动方式捕获网络流量,导致流量异常监测结果与实际情况的误差较大,为此提出基于主动策略的校园网络流量异常监测方法。首先,在引入主动策略的基础上,屏蔽下层各种网卡差别带来的数据包捕获结果异常问题,实现对校园网络流量的捕获;其次,利用Waxman模型分析网络流量的分布情况,结合服从泊松分布前提下两节点间的距离以及两节点间的流量参数,计算具体的网络流量异常值;最后,进行应用测试。测试结果表明,该方法对于不同攻击导致的网络流量异常监测结果与实际值之间的误差稳定在0.05 GB以内,处于较低水平。In network traffic anomaly monitoring,network traffic is generally captured in a passive way,which results in a large error between the traffic anomaly monitoring results and the actual situation.Therefore,a campus network traffic anomaly monitoring method based on active strategy is proposed.Firstly,on the basis of introducing the active strategy,we can shield the abnormal packet capture results caused by the differences of various network cards in the lower layer,and achieve the capture of campus network traffic.Secondly,the Waxman model is used to analyze the distribution of network traffic,and the distance between two nodes and the traffic parameters between two nodes under the premise of obeying Poisson distribution are combined to calculate the specific outlier of network traffic.Finally,conduct application testing.The test results show that the error between the network traffic anomaly monitoring results and the actual value caused by different attacks is stable within 0.05 GB,which is at a low level.

关 键 词：主动策略 校园网络 网络流量异常 监测 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]