Novel wobble-defended M-MULTOPS structure and its application in detecting network abnormal traffic

SUN Zhi-xin1; TANG Yi-wei1; GONG Jing1

您当前的位置：

首页 >

文章列表页 >

Novel wobble-defended M-MULTOPS structure and its application in detecting network abnormal traffic

更新时间：2024-10-14

- Novel wobble-defended M-MULTOPS structure and its application in detecting network abnormal traffic
- Issue 8, Pages: 92-98(2007)
- 作者机构：
  
  1. 南京邮电大学计算机学院
  2. 南京邮电大学计算机学院,江苏,南京,210003
  3. 南京邮电大学计算机技术研究所
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP393.06
- Published：2007
- 稿件说明：
移动端阅览
SUN Zhi-xin1, TANG Yi-wei1, GONG Jing1. Novel wobble-defended M-MULTOPS structure and its application in detecting network abnormal traffic[J]. 2007, (8): 92-98.
DOI：

SUN Zhi-xin1, TANG Yi-wei1, GONG Jing1. Novel wobble-defended M-MULTOPS structure and its application in detecting network abnormal traffic[J]. 2007, (8): 92-98. DOI：

摘要

提出了一种新的异常流量检测方法:防抖动的M-MULTOPS(modified-multi-level tree for online packet statistics)结构。针对核心路由器中网络流量的变化

运用ABF(adapted bloom filter)算法对IP数据包进行目的地址聚集。对于ABF算法的结果

给出了M-MULPOTS结构对其进行分析

实时地监控网络流量的变化

检测网络流量异常。由于运用了防抖动的M-MULTOPS结构

本方法不受脉冲式攻击时流量剧烈抖动的影响

使检测的结果稳定而准确

并且由于继承了MULTOPS结构的动态收缩性

极大地减少了系统的开销。利用本方法的检测系统已作为一个独立的模块

成功地运行于网络中的核心路由器之上。

Abstract

A new detection method: wobble defended M-MULTOPS（modified-multi-level tree for online packet statistics） structure was presented.Aiming at the change of network traffic in core routers

ABF（adapted bloom filter） algorithm to assemble destination addresses to the IP packets was employed.And it put forward M-MULPOTS struc-ture to analyze results of the ABF algorithm

monitoring changes of network traffic and detecting network flow ab-normity in real time.For making use of the Wobble-defended M-MULTOPS structure

the method can work steadily and exactly

even when the traffic of network is wobbling terribly by the pulse attack.And because the M-MULTOPS inherits the MULTOPS ’s flexible attribution

it declined the spending of system resources at maximum.A detection system em-ploying this method has been run successfully in routers as an individual module.

关键词

Keywords

references

Views

773

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Abnormal traffic detection method based on multi-scale attention feature enhancement

Distributed abnormal traffic detection method for SDN based on deep learning

Design, implementation and formal verification of BGP proxy for mimic router

Abnormal traffic detection method based on LSTM and improved residual neural network optimization

DDoS attack detection and defense based on hybrid deep learning model in SDN

Related Author

CHENG Xiang

ZHANG Haohao

YANG Hongyu

LIU Taotao

YU Yihan

DUAN Xueyuan

FU Yu

WANG Kun

Related Institution

School of Information Engineering, Yangzhou University

School of Computer Science and Technology, Civil Aviation University of China

School of Safety Science and Engineering, Civil Aviation University of China

Department of Operational Research and Programming, Naval University of Engineering

Henan Key Laboratory of Analysis and Applications of Education Big Data

AI问答

⁰