The invention discloses a traffic anomaly monitoring method and
system based on
big data and a storage medium, and belongs to the field of
network security. The method comprises the following steps: determining a monitoring target and a monitoring range, and defining a network range in which traffic monitoring needs to be carried out; data collection and arrangement: using a traffic
monitoring tool to collect network traffic data, and performing data cleaning and preprocessing; analyzing traffic characteristics, including
statistical analysis, protocol and port analysis and traffic mode identification; setting a baseline threshold, setting the baseline threshold based on the flow characteristic analysis result and the
service demand, and establishing an adaptive threshold adjustment mechanism; and continuous
verification and optimization: monitoring whether the network flow exceeds a baseline threshold in real time, triggering an
anomaly detection mechanism, generating early warning information, executing a
response strategy, and optimizing the baseline threshold according to feedback. By establishing the network flow
base line and monitoring the deviation condition in real time, network abnormity can be found in time, the
network security protection capability is improved, and the method is suitable for
security monitoring of various network environments.