Research and Implementation of Traffic Analysis and Anomaly Detection Technology Based on Entropy
Research and Implementation of Traffic Analysis and Anomaly Detection Technology Based on Entropy
复制标题
基于熵的流量分析与异常检测技术的研究与实现
DOI：
--
复制
发表时间：
2013
期刊：
影响因子：
--
通讯作者：
Liu Ying
中科院分区：
文献类型：
--
作者：
Liu Ying
【摘要】：随着互联网的快速发展,网络安全越来越受到人们的重视,流量异常检测技术作为网络监控的重要手段之一,越来越受到人们的重视。目前检测流量异常的方法有很多种,而基于熵的异常检测技术是近年来的重要手段。本文首先对基于信息熵的异常检测技术和基于联合熵的异常检测技术进行编程实现,然后进行实验。针对两种方式进行了测试和分析,结果表明基于联合熵的异常检测技术更为有效,进而提出了一种有效的流量异常检测思路。
With the rapid development of Internet,the network security receives more and more attention.As one of the important means of network monitoring and control,the traffic anomaly detection technology has been realizing more important by people.Now there are many ways to detect the anomaly of the traffic,and the anomaly detection technology based on entropy is an important means in recent years.First the anomaly detection technology based on information entropy and the anomaly detection technology based on joint-entropy are programming realized in this paper,then make an experimental test and an analysis according to the two ways.It shows that the anomaly detection technology based on joint-entropy is more effective,and then a valid analysis of ideas to detect the anomaly of traffic is proposed.