Network traffic checking method and network traffic checking device

Abstract

The invention discloses a network traffic checking method and a network traffic checking device, wherein the network traffic checking method comprises the steps of acquiring actual data of the network traffic in a to-be-checked time period and actual data of the network traffic in a reference time period, wherein the reference time period is before the to-be-checked time period and is adjacent with the to-be-checked time period; based on the actual data of the network traffic in the to-be-checked time period and the actual data of the network traffic in the reference time period, calculating predicated data of the network traffic in the to-be-checked time period; calculating an error between the actual data and the predicated data of the network traffic in the to-be-checked time period; determining a predication range of the network traffic in the to-be-checked time period according to the predicated data and the error; and if a fact that the actual data of the network traffic in the to-be-checked time period exceed a preset range is checked, determining a network traffic abnormity in the to-be-checked time period. The network traffic checking method and the network traffic checking device settle a technical problem of relatively low network traffic checking efficiency in prior art.

Description

technical field [0001] The present application relates to the field of data processing, in particular, to a method and device for checking network traffic. Background technique [0002] For network traffic data, it is usually necessary to check whether the traffic is abnormal or not. There are many ways to check traffic anomalies in the prior art, and the more commonly used ones are based on threshold values, based on statistics, and based on wavelets. , based on random process models such as Markov and some inspection methods based on machine learning, data mining and neural networks. [0003] In the above methods, the specific inspection process requires manual intervention, resulting in low overall inspection speed and low efficiency. [0004] For the above problems, no effective solution has been proposed yet. Contents of the invention [0005] Embodiments of the present application provide a method and device for inspecting network traffic, so as to at least solve t...

AI Technical Summary

Problems solved by technology

[0005] The embodiment of the present application provides a method and device for inspecting network traffic to at least solve the technical problem of relatively low efficiency in inspecting network traffic in the prior art

Images