Communication network abnormal behavior detection method based on random block model

A communication network and detection method technology, which is applied in the field of communication network abnormal behavior detection based on random block model, can solve the problems that the communication network behavior characteristics cannot be fully displayed, and network data interaction information is not considered.

Active Publication Date: 2019-11-08
GUIZHOU POWER GRID CO LTD
View PDF8 Cites 10 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0007] The technical problem to be solved by the present invention is to provide a communication network abnormal behavior detection method based on a random block model, so as to solve the problem that the existing techn

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Communication network abnormal behavior detection method based on random block model
  • Communication network abnormal behavior detection method based on random block model
  • Communication network abnormal behavior detection method based on random block model

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0044] A method for detecting abnormal behavior of a communication network based on a random block model, comprising:

[0045] Transformation and Extraction of Network Data

[0046] The directly obtained network data is stored in binary form, so the original binary network flow data should be converted into identifiable information before analysis. In the data, not every item is concerned by this article, so when converting, only the source IP address and destination IP address are concerned.

[0047] The similar behavior is defined as the connection behavior of nodes with the same purpose. Usually, in normal communication network behaviors, the number of nodes with similar behaviors is small, and in abnormal communication network behaviors, the number of nodes with similar behaviors is generally large. According to other network data, we mainly focus on the source IP address and destination IP address, and we can discover the characteristics of abnormal network data based on...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a communication network abnormal behavior detection method based on a random block model. The communication network abnormal behavior detection method comprises the following steps: step 1, processing network data: extracting a destination IP address of a source IP address from the obtained network data; step 2, constructing an adjacent matrix A; step 3, determining a random block model input matrix; step 4, inputting the matrix through the random block model to obtain a network topological graph; step 5, calculating a z-score value; step 6, judging whether the networkis abnormal or not according to the z-score value. The technical problems that in the prior art, for network abnormal behavior detection, interaction information between network data is not considered, and characteristics of communication network behaviors cannot be comprehensively displayed are solved.

Description

technical field [0001] The invention belongs to network anomaly detection technology, in particular to a communication network anomaly behavior detection method based on a random block model. Background technique [0002] With the development of the Internet and the continuous growth of business volume, the communication network is developing in the direction of high speed, diversification, and complexity. While the network provides people with great convenience, abnormal behavior of the communication network also emerges as the times require. The service rate of the network is reduced, people's network experience is reduced, and the security, reliability and efficiency of network communication have become our focus. [0003] Abnormal network behaviors are characterized by sudden onset, unknown aura characteristics, and massive consumption of network resources, resulting in network congestion, decreased network link utilization, and significantly reduced network service qual...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06H04L12/24
CPCH04L41/142H04L41/145H04L63/1416H04L63/1425
Inventor 左宇王颖舒刘晴张娟娟袁舒黄韬徐拓之李易韦倩
Owner GUIZHOU POWER GRID CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products