Detecting method for abnormal intrusion of large high-dimensional data of network

Abstract

The invention discloses a detecting method for abnormal intrusion of large high-dimensional data of a network. The detecting method for abnormal intrusion of the large high-dimensional data of the network comprises the following steps of learning stage: establishing SST (signal sustain technology) space comprising fixed SST subspace, unsupervised SST subspace and supervised SST subspace; and detecting stage: updating synoptic PCS (personal communication service) of each SST subspace with data so as to acquire information of new arrived data after data of the network arrive, determining that the subspace is abnormal separated subspace if PCS of cells belongs to at least one SST subspace with a predefined threshold value, and feeding back abnormal PCS values of the cells and all abnormal values or a specific amount of abnormal values comprising abnormal separated subspace to a user and the SST space. By the detecting method, the detecting efficiency and the accuracy of network abnormal intrusion can be improved further under the conditions that the network data size is large, the dimension is increased and correlation of the data is reduced.

Description

technical field [0001] The invention relates to a method for detecting abnormality of network data, in particular to a method for detecting abnormal intrusion of network high-dimensional big data. Background technique [0002] In recent years, the network has developed rapidly. From the abnormal detection of network traffic, malicious network intrusions can be detected, and the scale of data from the network is getting larger and larger. An intruded computer network will threaten the stability and security of the network, and even lead to private LOSS OF INFORMATION AND PROPERTY. In order to ensure the security of the network, there are mainly two types of methods used to detect abnormal network intrusions, namely, misuse detection methods and anomaly detection methods. The misuse detection method is to extract features from the flow data and compare them with known signatures, patterns or specifications. If a feature violates one or more signatures, the intrusion will be d...

AI Technical Summary

Problems solved by technology

[0004] The present invention aims at at least to a certain extent to solve the problem that the existing network anomaly detection method cannot adapt to the anomaly detection of network high-dimensional big data abnormal intrusion

Images