.png){kind=icon}
返回
Monitoring abnormal network traffic based on blind source separation approach
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jnca.2011.06.006.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The randomness in network behaviors poses serious challenges for discovering abnormal patterns in network traffic flows. This paper presents a systematic approach for monitoring abnormal network traffic. The DFlow model is proposed to reduce the flow records and extract four features to capture the traffic patterns. The blind source separation method is applied to obtain the routine and abnormal behaviors from those features. A scale space filter is applied to filter the randomness in the traffic flows without affecting the behavior patterns. A threshold is selected based on a systematic criterion to evaluate the degree of abnormality. The contributions of different traffic features to the abnormal behavior detection are analyzed. It is found that the number of connection degree is the most important feature for traffic monitoring. A salient feature of this method is that it is effective for detecting the abnormal behaviors not associated with significant changes in traffic volumes. Another advantage of the new method is that no supervised learning process is needed. This is very important since high quality labeled samples are very difficult to acquire in actual networks especially the data traces associated with attacks. The experimental results based on the actual network data show that the method presented in the paper is effective for monitoring abnormal traffic flows in the gigabytes traffic environment and the accuracy is above 95%. (C) 2011 Elsevier Ltd. All rights reserved.
Keyword:
Network traffic monitoring
Abnormal behavior detection
DFlow model
Blind source separation
Scale space filter
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
8
论文数:
3.7K
被引数:
1.1W
机构
引用论文
.png){kind=icon}
Kationische Carbonyliridium(III)‐Komplexe: [Ir(CO)6]3+ und [Ir(CO)5Cl]2+碳羰基化 (III)-复合物: [Ir(CO)6]3 und [Ir(CO)5Cl]2 
PREAI
分享收藏
查看更多内容