摘要
针对网络环境中可能导致网络流量异常的问题,归纳了当前主流的网络异常流量检测方法。通过阐明网络异常流量检测过程中的关键问题和核心技术,重点探讨了固定阈值、特征检测、统计分析、数据挖掘、云计算方法的原理和适用范围,对网络流量中异常流量的定义和分类进行了总结,介绍相关的研究进展,并分析异常流量检测的当前现状和发展前景。该分析结果为异常网络流量检测研究提供了参考依据,也为网络安全研究提供了支持。
Conclude the current anomaly network flow detection methods for the anomaly network flow problem in network environment. By introducing key problem and key technology of network anomaly flow detection, pay more attention on discussing principle and application area of constant-threshold, feature detection, statistical analysis, data mining, and cloud computing method. Conclude definition and classification of network anomaly flow, introduce related research, and carry out further analysis current situation and development prospect of anomaly flow. The analysis result provides a reference for the detection of anomaly network flow, and also provides support for network security research.
作者
张楠
李洪敏
卢敏
柯明敏
Zhang Nan;Li Hongmin;Lu Min;Ke Mingmin(Institute of System Engineering, China Academy of Engineering Physics, Mianyang 621900, China)
出处
《兵工自动化》
2016年第9期66-69,共4页
Ordnance Industry Automation
关键词
网络流量
异常流量
检测
综述
network flow
anomaly flow
detection
overview
