| 基于正常轮廓更新的自适应异常检测方法 |
| |
| 引用本文： | 熊平.基于正常轮廓更新的自适应异常检测方法[J].武汉大学学报(信息科学版),2007,32(9):842-845. |
| |
| 作者姓名： | 熊平 |
| |
| 作者单位： | 中南财经政法大学信息学院,武汉市武珞路114号,430060 |
| |
| 基金项目： | 中南财经政法大学校科研和教改项目 |
| |
| 摘 要： | 根据网络系统发生正常改变的基本特征,提出了确定网络系统正常改变的“三条件”计算方法,其计算结果可作为更新正常轮廓的依据。对正常轮廓的更新问题进行了深入探讨,提出了自适应异常检测的实现机制。并以网络流量分析为例,验证了在异常检测中应用这一方法的可行性。
|
| 关 键 词： | 异常检测 正常轮廓 规则更新 |
| 文章编号： | 1671-8860（2007）09-0842-04 |
| 修稿时间： | 2007-06-25 |
An Adaptive Anomaly Detection Method Based on Normal Profile Updating |
| |
| XIONG Ping.An Adaptive Anomaly Detection Method Based on Normal Profile Updating[J].Geomatics and Information Science of Wuhan University,2007,32(9):842-845. |
| |
| Authors: | XIONG Ping |
| |
| Institution: | School of Information,Zhongnan University of Economics and Law,114 Wuluo Road,Wuhan 430060,China |
| |
| Abstract: | According to the characteristics of legal change in Network,a three-premise computing approach is brought out to identify the legal change of protected Network.The problem of normal profile updating is discussed and the principle that designing an adaptive anomaly detection system is described.Using experiments on network traffic analysis,the feasibility of updating normal profile for anomaly detection system is validated. |
| |
| Keywords: | anomaly detection normal profile rules updating |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
