The invention provides a malicious traffic detection method in a high-bandwidth scene based on
frequency domain analysis. The method comprises the following steps: carrying out data packet
granularity feature extraction on network traffic to obtain a data packet
granularity feature; encoding the features of the data packet
granularity to obtain
matrix representation, performing fitting operation to obtain a plurality of frames, and performing
frequency domain analysis on each frame to obtain a corresponding
frequency domain feature; calculating the power of the frequency domain features to obtain power representation, performing logarithmic transformation to obtain frequency domain feature representation,
cutting and averaging the frequency domain feature representation to serve as the input of a statistical clustering
algorithm, and outputting a clustering center; and calculating the distance between the frequency domain feature representation and the corresponding nearest clustering center, if the distance is greater than a predetermined multiple of a training error, determining that the flow corresponding to the frequency domain feature representation is abnormal flow, otherwise, determining that the flow is normal flow. The method has the advantages of high detection
throughput, high precision, low time
delay and the like, and malicious traffic can be accurately detected in a high-bandwidth scene while calculation overhead and storage overhead are considered.