基于小波技术的网络异常流量检测与实现

Anomaly Detection and Implementation Based on Wavelet

随着互联网的迅速发展和各种互联网应用的普及,对网络资源的需求和使用也迅速增加,网络中也包含大量的蠕虫、端口扫描、DDoS、网络滥用等异常流量,因此有效、快速检测这些异常流量的手段是必须的。本文通过采集路由端口上的NetFlow流,建立了一个利用小波方法分析网络异常流量的框架,通过此方法可以较为理想地检测出网络中的异常流量,在实际应用中取得了较为理想的效果。最后用小波方差分析了不同的小波函数在检测网络异常流量时的效能。

A tremendous demand for an ever increasing reliance on network resources has led to a rapid rise in those resources. The network are faced with more and more threaten from Worm, port scan,DDos and network abuse, so the effective and rapid measure is required. This paper setup a framework to analyze network anomalies based on wavelet by using NetFlow. And we have evaluated various wavelets for their effectiveness at detecting different kinds of anomalies. The system has gained ideal effect.