A Novel Method of Filtering Internet Background Radiation Traffic
A Novel Method of Filtering Internet Background Radiation Traffic
复制标题
DOI：
10.1109/eidwt.2013.70
复制
发表时间：
2013-09
期刊：
影响因子：
--
通讯作者：
Ruoyu Wang;Ling Zhang;Z. Liu
中科院分区：
文献类型：
--
作者：
Ruoyu Wang;Ling Zhang;Z. Liu
互联网背景辐射(IBR)流量是互联网上普遍存在的一种异常流量。检测或过滤掉所有流量中的IBR流量，有利于保障网络安全。提出了一种基于相对不确定性理论的IBR流量过滤方法。它直接从收集的网络流量数据中过滤出IBR流量，而不需要特定的配置或构建额外的采集系统。该方法的关键假设是正常用户的业务源是相对确定的，而不是随机的。该方法过滤出的IBR流量除了包括发往未签名IP的流量外，还包括发送到普通用户主机的流量，对网络安全更有价值和实用价值。
Internet Background Radiation (IBR) traffic is a kind of abnormal traffic, which is ubiquitous on the Internet. Detecting or filtering out IBR traffic from all traffic is benefit to ensure network security. This paper proposes a novel IBR traffic filtering method based on relative uncertainty theory. It directly filters out IBR traffic from collected Net Flow data without specific configurations or building extra collection system. The key assumption of our approach is that the traffic source of normal users is relatively certain rather than random. The IBR traffic filtered by our approach also includes the part that sent to normal user hosts besides the traffic to unsigned IP, which is more valuable and practical to network security.