网络安全事件流中异常检测的方法分析

On Anomaly Detection Method of Network Security Event Flow

伴随着计算机的普及应用与网络安全问题的日益突出,探寻一种网络安全异常的检测方式已经显势在必行。而优良的网络安全检测方法可以动态的反应网络的安全状况,及时的做出预警。本文之所以网络安全事件流的异常检测为论述对象,就是因为它不仅可以检测到来自外部的攻击,还可以检测用户本身在日常的操作中所使用的非授权行为。

Along with the popularization of computer and network security issues become more prominent,exploring a network security anomaly detection approach has become obvious imperative.The excellent network security testing methods can dynamically reflect network security and make a timely warning.It not only detects external attack,but also detects the unauthorized acts the users used in the daily operation.