Method and device for identifying abnormal traffic

A technology of abnormal flow and identification method, applied in the direction of digital transmission system, electrical components, transmission system, etc., can solve problems such as loss, business failure, customer communication failure, etc., and achieve good real-time effect

Inactive Publication Date: 2016-02-24
睿峰网云(北京)科技有限公司
View PDF2 Cites 4 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0002] The network is essential to us, but everything has a negative side. There will also be many obstacles when using the network, and the most difficult to avoid is the abnormal traffic of the network. Abnormal traffic is equivalent to hacker attacks. The flood-like abnormal traffic initiated by a specific port caused the network to be paralyzed and brought us huge losses. Customers could not communicate and business could not be carried out. Therefore, ensuring the stability of network traffic played a vital role

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for identifying abnormal traffic

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0020] The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. All other embodiments obtained by persons of ordinary skill in the art based on the embodiments of the present invention belong to the protection scope of the present invention.

[0021] Such as figure 1 As shown, a method for identifying abnormal traffic according to an embodiment of the present invention includes the following steps:

[0022] Capture network traffic information through bypass packet capture, and generate traffic data according to the captured network traffic information;

[0023] Smooth the captured network traffic and model the time flow in the network traffic using the principle of minimum residual square difference

[0024] Predict the character...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method for identifying abnormal traffic. The method comprises the following steps: capturing network traffic information through bypass packet capture, and generating traffic data according to the captured network traffic information; stabilizing the captured network traffic, modeling the time traffic in the network traffic by utilizing the principle of least square error, forecasting the feature value of the modeled traffic value, and designing a forecasting method of a user traffic behavior time sequence in the form of difference equation; and establishing a behavior model of a user according to the forecasting method of the time sequence, and judging the traffic beyond the behavior model as abnormal traffic. The method has the advantages that the abnormal traffic is judged in time by analyzing the behaviors of the user, so that the method has good instantaneity and can be applied to multiple occasions.

Description

technical field [0001] The invention relates to a method and device for identifying abnormal flow. Background technique [0002] The network is essential for us, but everything has a negative side. There will also be many obstacles when using the network, and the most difficult to avoid is the abnormal traffic of the network. Abnormal traffic is equivalent to hacker attacks. It targets certain A flood of abnormal traffic initiated by a specific port paralyzes the network and brings us huge losses. Customers cannot communicate and business cannot be carried out. Therefore, ensuring the stability of network traffic plays a vital role. [0003] Aiming at the problems in the related technologies, no effective solution has been proposed yet. Contents of the invention [0004] The object of the present invention is to provide a method for identifying abnormal traffic, so as to overcome the above-mentioned shortcomings in the current prior art. [0005] The purpose of the p...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/26H04L12/721H04L12/801H04L29/06
CPCH04L63/1425H04L43/04H04L43/045H04L45/38H04L47/10H04L63/1408
Inventor 储来斌
Owner 睿峰网云(北京)科技有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products