Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Detection method and apparatus for network flux exception

A network traffic and anomaly detection technology, applied in the network field, can solve problems such as low accuracy and poor operability, and achieve the effect of improving accuracy

Inactive Publication Date: 2009-01-14
HUAWEI DIGITAL TECH (CHENGDU) CO LTD +1
View PDF0 Cites 15 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0016] In view of this, an embodiment of the present invention provides a method and device for detecting anomalies in network traffic to solve the problems of low accuracy and poor operability of anomalies detection in the prior art

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Detection method and apparatus for network flux exception
  • Detection method and apparatus for network flux exception
  • Detection method and apparatus for network flux exception

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0051]The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

[0052] The embodiment of the present invention uses linear frequency modulation wavelet transform as an analysis means to assist in the detection of abnormal network traffic.

[0053] LFM wavelet transform is a time-frequency analysis method, which is an extension of wavelet transform and short-time Fourier transform. It combines the advantages of short-time Fourier transform and wavelet transform while avoiding their shortcomings. Compared with short-time Fourier t...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

An embodiment of the invention discloses an anomaly detection method of network flow, comprising: performing line frequency modulation wavelet transformation on detected flow signals, obtaining a transforming spectrum; dividing the transforming spectrum into at least two frequency spectrum coverages; performing signal reconstruction on each frequency spectrum coverage, operating the reconstructed signal through deviation fraction algorithm, obtaining deviation fraction; comparing the deviation fraction with presupposed threshold, determining whether the network flow is abnormal according to the comparing result. An embodiment of the invention also discloses a device realizing the method. The embodiment of the invention decomposes according to different time frequency resolution, thereby effectively detecting continuous anomaly flow for a long time and breaking anomaly flow for a short time, and detecting high frequency and middle frequency attack flow which are not detected by the network flow anomaly detection method based on wavelet transformation, through a second time detection after signal self-adapting reconstitution, anomaly character is further determined, and detecting accuracy is advanced.

Description

technical field [0001] The present invention relates to the field of network technology, and more specifically, to a method and device for detecting network traffic anomalies. Background technique [0002] Network traffic anomalies refer to situations where the traffic behavior of a network deviates from its normal behavior. [0003] There are various reasons for causing abnormal network traffic, such as bad operation of network equipment, abnormal network operation, flash crowd or network intrusion. Abnormal traffic is characterized by sudden onset and unknown aura characteristics, which can bring great harm to the network or computers on the network in a short period of time (such as sudden access behavior caused by specific attack programs or worm outbreaks). Therefore, it is an important prerequisite to ensure the normal operation of the network to accurately and quickly detect the abnormal behavior of network traffic and make a reasonable response. [0004] In the pri...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L12/26H04L12/56
Inventor 胡光岷李宗林杨丹杨松
Owner HUAWEI DIGITAL TECH (CHENGDU) CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com