NMF-NAD:基于NMF的全网络流量异常检测方法

NMF-NAD: detecting network-wide traffic anomaly based on NMF

提出了一种基于非负矩阵分解(NMF,non-negative matrix factorization)的多元异常检测算法(NMF-NAD,NMF based network-wide traffic anomalies detection),该算法首先采用非负子空间方法对流量矩阵进行重构,然后基于重构误差利用Shewhart控制图进行异常检测。模拟实验与因特网实测数据的分析表明,NMF-NAD算法有较高的检测精度和较低的处理复杂度。

A non-negative matrix factorization（NMF） based network wide traffic anomalies detection（NMF-NAD） method was proposed.NMF-NAD firstly reconstructed the traffic matrix in the non-negative sub-space,and then detected the anomalies through Shewhart control chart based on the reconstruction error.Experimental results on both simulation and Abilene data show that NMF-NAD can achieve high detection accuracy with low complexity.