A method and system for detecting abnormal traffic data

Abstract

Embodiments of the present invention provide a method and system for detecting abnormal traffic data. The method includes: inputting the characteristics of any piece of traffic data in the traffic data packet to be detected into the trained autoencoder model or principal component analysis model to obtain the score corresponding to any piece of traffic data; if the score is greater than the preset abnormal threshold , any piece of flow data is determined to be abnormal flow data. The method and system provided by the embodiments of the present invention can detect the traffic data in the network online or offline by using the principal component analysis method in the unsupervised machine learning clustering algorithm and the automatic encoder to detect the abnormal traffic data , has wider application. Moreover, the use of machine learning algorithms to detect abnormal traffic data in the network can avoid high screening errors caused by the artificial screening process, and enable the network to take corresponding actions in advance to reduce the probability of network attacks and user privacy leaks.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of network security, and in particular, to a method and system for detecting abnormal traffic data. Background technique [0002] Today's network technology is developing rapidly, and the network generates hundreds of trillions of traffic every day. Network traffic detection is related to many issues such as network security and user privacy security, so it has attracted more and more attention. Network anomaly traffic detection is a very important and popular research direction in the field of network security. Abnormal network traffic detection refers to separating abnormal traffic with network attack behavior from a large amount of mixed network traffic data to distinguish it from normal traffic data. [0003] Abnormal traffic detection in network security requires that the detection system can quickly and accurately detect abnormal traffic in the network, and it is particularly...

AI Technical Summary

Problems solved by technology

[0004] Embodiments of the present invention provide a method and system for detecting abnormal traffic data, which are used to solve the defects in the prior art that the abnormal traffic data in the network cannot be quickly and accurately detected and online traffic data cannot be detected in real time, and the abnormal traffic data is improved. The efficiency and accuracy of traffic data detection, and the ability to detect online traffic data in real time

Images