Journal of Beijing University of Posts and Telecommunications

  • EI核心期刊

JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM ›› 2009, Vol. 32 ›› Issue (6): 28-31.doi: 10.13190/jbupt.200906.28.qiuxs

• Papers • Previous Articles     Next Articles

Anomaly Traffic Integrated Detection Model for Enterprise IT Network

QIU Xue-song;CHEN Jian;GUO Hai-sheng;GAO Zhi-peng   

  1. (1.State Key Laboratory of Networking and Switching Technology, Beijing Univers
    ity of Posts and Telecommunications, Beijing 100876, China;
    2.Network Management Product Department, Zhongxing Telecommunication Equipment
    Limited, Nanjing 210012, China)
  • Received:2009-03-22 Revised:1900-01-01 Online:2009-12-28 Published:2009-12-28
  • Contact: QIU Xue-song

Abstract:

A new algorithm of the network anomaly traffic detection by using time windows comparing method is proposed based on the feature of enterprise information technology (IT) network traffic. Then, combining the new algorithm, the present static detection algorithm and the dynamic detection algorithm, the integrated detection model of network anomaly traffic is proposed. The model can check the network anomaly traffic by comparison methods by different ways and from different views. Finally, the availability of model is validated by implementation and testing of model in real environment.

Key words: network anomaly traffic, anomaly detection, network management