基于分形特征的网络异常检测方法研究

A Novel Approach Based on Fractal Characteristics for Anomaly De tection

网络连接同许多其它现象一样,呈现出一种统计自相似性。论文根据此特征提出了一种基于分形特征的网络异常检测方法,该方法能够根据网络连接分形维数的变化,有效地检测网络拒绝服务攻击和端口扫描等异常情况,并通过模拟实验证明了该方法的可行性。

Just as many other phenomena,network connection takes on a kind of characteristic of statistical self-simi-larity.Based on this intrinsic factor,a new anomaly detection approach using fractal theory is proposed in this paper.The method can efficiently detect port scan and network DoS attacks according to the change of network connection's fractal dimension.Simulated tests given in the paper have proved its feasibility and applicability.