Unlock instant, AI-driven research and patent intelligence for your innovation.

A method and system for generating dynamic data stream

A data flow and dynamic technology, applied in the network field, can solve the problems of reduced measurement accuracy and detection efficiency, and achieve the effects of high accuracy, flexible system and flexible method

Active Publication Date: 2018-08-03
TSINGHUA UNIV
View PDF2 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The detection efficiency and measurement accuracy are a pair of contradictions, improving the detection efficiency will lead to a decrease in measurement accuracy, on the contrary, increasing the measurement accuracy will reduce the detection efficiency

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A method and system for generating dynamic data stream
  • A method and system for generating dynamic data stream
  • A method and system for generating dynamic data stream

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0057] For example, the administrator sets parameters α=0.4, β=0.4, W * =5000,T * =500,E * =75%, and deploy the data packet counter, set the counting period, τ=100s, τ 0 = 10s. The parameters of the random flow sampling method used by the system are: p=10%, a=3, b=2, ΔT=10s, ΔW=100, e=20. The system starts to run, and the measured flow S′=3000 entering the system in the first 10s, then The system inputs the information into the optimization function for solution, and obtains N opt =3. Then the system will define the data flow according to the triplet in the next τ time. In each new period, the system will re-measure the network traffic S′, solve the optimization scheme, redefine the data flow, and repeat.

Embodiment 2

[0059] For example, the administrator sets parameters α=0.1, β=0.1, W * =5000,T * =500,E * =75%, and deploy the data packet counter, set the counting period, τ=100s, τ 0 = 10s. The parameters of the random flow sampling method used by the system are: p=10%, a=3, b=2, ΔT=10s, ΔW=100, e=20. The system starts to run, and the measured flow S′=3000 entering the system in the first 10s, then The system inputs the information into the optimization scheme for solution, and obtains N opt =5. Then the system will define the data flow according to the five-tuple in the next τ time. In each new period, the system will re-measure the network traffic S′, solve the optimization scheme, redefine the data flow, and repeat.

[0060] It can be seen from the above that in Embodiment 1, the sampling overhead and detection time of anomaly detection are prioritized, and the accuracy of anomaly detection is taken as the cost. According to the optimization function, the optimal data flow defin...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides a dynamic data flow defining method. The dynamic data flow defining method comprises the following steps of setting network parameters and a data flow defining period according to demands of a user; setting an initial data flow defining method according to conditions of a network; deploying a data package counter; setting a counting period of the counter; counting network flow in a preset time according to a counting value of the data package counter; substituting the network parameters and the network flow in an optimization function and solving the optimization function to obtain a new tuple item for defining data flow; redefining the data flow according to the new tuple item for defining the data flow; and classifying entered data packages according to the redefined data flow defining method. The preset time is smaller than the counting period. The dynamic data flow defining method is flexible and reasonable, is beneficial to detect abnormal behaviors efficiently, and has the advantages of high efficiency and high accuracy. The invention also provides a dynamic data flow defining system.

Description

technical field [0001] The invention relates to the field of network technology, in particular to a dynamic data flow definition method and system. Background technique [0002] At present, abnormal behaviors such as worms, DoS attacks, and port scans exist in the network. While analyzing data packet fields and forwarding data, the routing and switching system is also responsible for abnormal behavior detection. In order to reduce the storage space and CPU requirements of the routing and switching system and improve the bandwidth utilization rate of transmission data collection records, it is necessary to sample the network traffic before performing anomaly detection. However, detection efficiency and measurement accuracy are a pair of contradictions. Improving detection efficiency will lead to a decrease in measurement accuracy. On the contrary, increasing measurement accuracy will reduce detection efficiency. [0003] Packet sampling and flow sampling are two widely stud...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L12/26H04L29/06
Inventor 徐恪付瑶沈蒙赵有健马东超
Owner TSINGHUA UNIV