数据包在网络异常行为研究中的应用

The Application of Data Packets in Study on Network Abnormal Behavior

以网络访问中的异常行为为研究对象,通过对数据包的深入分析,从数据包中提取与网络异常行为相关的内容特征,然后通过与数据包包头信息的集合,构成对网络行为进行研究的特征库。在实验的基础上,通过对所提取得到的网络异常特征进行记录,构建完善的网络异常行为数据库。

Based on the network access abnormal behavior as the research object, through in-depth analysis of the data packets, extracted from the packet content related to network behavior characteristics, and then through the collection and packet header information, constitute the characteristics base of the study of network behavior. Then, on the basis of experiment, through the network anomaly characteristics obtained by extracting record, build perfect network database abnormal behavior.