基于统计的校园网异常流量检测系统设计与实现

Design and Implement of Traffi c Anomaly Detecting System based on Statistics

对于校园网用户来说,单一用户中病毒猛发数据包等异常流量往往带来大面积网络故障,同时给网络管理员带来很大的工作量,因此,如何迅速定位到异常流量源头主机是一个重要问题。通过SNMP读取网络设备的相应MIB表,从网络设备端定位源头主机,从而实现对异常流量主机进行检测。实验证明,它大大加强了校园网的安全。

Abstact： for the campus network users, the anomaly traffic such as a single computer with virus will cause the network failure, and it leads to the great workload for the network administrators. so how to locate the source host fast is a very important problem. the paper read the MIB table of network device by SNMP to detect the anomaly traffic port to locate the source host. the experiments show that it greatly Strengthens the network security.