The invention discloses an abnormal
traffic analysis method based on
big data analysis, and the method comprises the following steps: S1, collecting edge traffic, verifying the authority, and generating a traffic
data set passing
verification; s2, executing structured preprocessing, extracting features, and constructing a traffic
data set in a unified format; s3, performing block coding
processing and symmetric
encryption operation, introducing
differential privacy, and generating a traffic
feature data set; s4, packaging the traffic
feature data in batches, and transmitting the traffic
feature data to the cloud to form a global traffic feature data
pool; s5, constructing a traffic behavior
reference model, and generating a feature distribution description result; s6, executing deviation calculation and mode comparison, and identifying an abnormal traffic candidate set; and S7, executing
vulnerability assessment analysis, generating a corresponding
vulnerability risk
score and outputting an abnormal traffic judgment result. According to the invention, efficient, real-time and accurate
anomaly detection of large-scale network traffic is realized, and
data security and privacy are guaranteed.