Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Traffic anomaly detection method, model training method and device

A traffic anomaly and model-determining technology, applied in digital transmission systems, data exchange networks, electrical components, etc., can solve the problem of low accuracy of network traffic data, incompetence of manual work for abnormal detection, and network traffic data distribution that does not obey the normal distribution. and other problems to achieve the effect of improving the accuracy

Active Publication Date: 2019-09-20
HUAWEI TECH CO LTD
View PDF9 Cites 13 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Data sources include applications, processes, operating systems, devices, or networks. With the increase in the complexity of computing systems, manual labor is no longer capable of the current anomaly detection difficulty.
[0003] In the prior art, an algorithm based on statistics and data distribution is used to detect anomalies in network traffic data. The premise is that the traffic data obeys a normal distribution in a short period of time. However, the distribution of network traffic data does not obey the normal distribution in a short period of time. Normal distribution, therefore, the algorithm based on statistics and data distribution is not very accurate in anomaly detection of network traffic data

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Traffic anomaly detection method, model training method and device
  • Traffic anomaly detection method, model training method and device
  • Traffic anomaly detection method, model training method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0167] For ease of understanding, several concepts involved in the embodiments of the present application are firstly introduced below.

[0168] 1. A time series is a set of data point sequences arranged in chronological order. Usually the time interval of a set of time series is a constant value, so the time series can be analyzed and processed as discrete time data. Anomaly detection in time series is usually to find data points that deviate from a relatively established pattern or distribution. Time series anomalies include: sudden rise, sudden drop, mean change, etc. Anomaly detection algorithms for time series include algorithms based on statistics and data distribution (N-Sigma), algorithms based on distance / density (local anomaly factor algorithm), isolation forest, and prediction-based algorithms (ARIMA), etc.

[0169] 2. Traffic anomaly detection. Anomaly detection is performed on the traffic data collected from devices or ports in the network. The abnormal detectio...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides a traffic abnormality detection method. The method comprises the steps of obtaining a target time sequence comprising N elements; according to the target time sequence, obtaining target parameters of the target time sequence, wherein the target parameters comprise a periodic factor and / or jitter density, the periodic factor represents one type of waveform change which is presented in the target time sequence and surrounds the long-term trend, and the jitter density represents the deviation of the actual value and the target value of the target time sequence in the target time; determining a first type to which the target time sequence belongs from a plurality of types according to the target parameter, each type in the plurality of types corresponding to a parameter set, and the target parameter belonging to the parameter set corresponding to the first type; and according to the first type of judgment model corresponding to the first type, the abnormal condition of the target time sequence is detected, and each type in the multiple types corresponds to one type of judgment model. According to the technical scheme, the accuracy of flow abnormity detection can be improved.

Description

technical field [0001] The present application relates to the field of machine learning, and more specifically, relates to a traffic anomaly detection method, model training method and device. Background technique [0002] In the field of machine learning, anomaly detection refers to the detection of models, data or events that do not conform to predictions. Usually anomaly detection is learned by professionals on historical data, and then finds outliers. Data sources include applications, processes, operating systems, devices, or networks. With the increase in the complexity of computing systems, humans are no longer competent for the current difficulty of anomaly detection. [0003] In the prior art, an algorithm based on statistics and data distribution is used to detect anomalies in network traffic data. The premise is that the traffic data obeys a normal distribution in a short period of time. However, the distribution of network traffic data does not obey the normal d...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/24H04L12/26
CPCH04L41/145H04L43/08H04L43/026H04L43/087H04L43/067H04L41/064H04L63/1425
Inventor 张彦芳李刚薛莉林玮唐宏朱永庆
Owner HUAWEI TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products