Journal of Northeastern University Natural Science ›› 2019, Vol. 40 ›› Issue (1): 26-31.DOI: 10.12068/j.issn.1005-3026.2019.01.006

• Information & Control • Previous Articles     Next Articles

Anomaly Detection of Network Traffic Based on Flow Time Influence Domain

XU Jiu-qiang, ZHOU Yang-yang, WANG Jin-fa, ZHAO Hai   

  1. School of Computer Science & Engineering, Northeastern University, Shenyang 110169, China.
  • Received:2017-10-18 Revised:2017-10-18 Online:2019-01-15 Published:2019-01-28
  • Contact: WANG Jin-fa
  • About author:-
  • Supported by:
    -

Abstract: Aiming at improving the accuracy rate of anomaly network traffic detection, a network traffic detection model was proposed based on the time influence domain(TID)of network flow. By analyzing the changes of average degree of traffic network model under the normal and abnormal conditions, an anomaly detection algorithm of network traffic based on the average degree metric of complex network was developed to detect the abnormal traffic. Experimental results show that based on the flow time influence domain, the anomaly detection model of traffic network can reasonably describe the inter-dependency relationship between network traffic. The proposed method has a better detection performance, meanwhile only three network features, i.e. timestamp, source IP and destination IP, are needed to implement the above model. Detection efficiency is better than other methods. The method proposed meets most network types and has a better ubiquity.

Key words: network traffic, anomaly detection, flow time influence domain, traffic network model, network average degree

CLC Number: