CN105119734B - 基于健壮多元概率校准模型的全网络异常检测定位方法 - Google Patents
基于健壮多元概率校准模型的全网络异常检测定位方法 Download PDFInfo
- Publication number
- CN105119734B CN105119734B CN201510414996.5A CN201510414996A CN105119734B CN 105119734 B CN105119734 B CN 105119734B CN 201510414996 A CN201510414996 A CN 201510414996A CN 105119734 B CN105119734 B CN 105119734B
- Authority
- CN
- China
- Prior art keywords
- model
- abnormal
- data
- distribution
- sample
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000001514 detection method Methods 0.000 title claims abstract description 84
- 238000000034 method Methods 0.000 title claims abstract description 74
- 230000005856 abnormality Effects 0.000 title claims abstract description 23
- 230000004807 localization Effects 0.000 title abstract description 4
- 230000002159 abnormal effect Effects 0.000 claims abstract description 121
- 238000004458 analytical method Methods 0.000 claims abstract description 13
- 239000011159 matrix material Substances 0.000 claims description 59
- 238000004422 calculation algorithm Methods 0.000 claims description 26
- 239000013598 vector Substances 0.000 claims description 19
- 238000007476 Maximum Likelihood Methods 0.000 claims description 16
- 238000004364 calculation method Methods 0.000 claims description 9
- 230000002547 anomalous effect Effects 0.000 claims description 6
- 238000010276 construction Methods 0.000 claims description 5
- 238000005315 distribution function Methods 0.000 claims description 4
- NAWXUBYGYWOOIX-SFHVURJKSA-N (2s)-2-[[4-[2-(2,4-diaminoquinazolin-6-yl)ethyl]benzoyl]amino]-4-methylidenepentanedioic acid Chemical compound C1=CC2=NC(N)=NC(N)=C2C=C1CCC1=CC=C(C(=O)N[C@@H](CC(=C)C(O)=O)C(O)=O)C=C1 NAWXUBYGYWOOIX-SFHVURJKSA-N 0.000 claims description 3
- 239000000203 mixture Substances 0.000 claims description 3
- 238000012163 sequencing technique Methods 0.000 claims description 3
- 238000012217 deletion Methods 0.000 abstract description 22
- 230000037430 deletion Effects 0.000 abstract description 22
- 238000005259 measurement Methods 0.000 description 22
- 238000002474 experimental method Methods 0.000 description 16
- 230000006870 function Effects 0.000 description 12
- 230000007246 mechanism Effects 0.000 description 11
- 238000011160 research Methods 0.000 description 11
- 238000010206 sensitivity analysis Methods 0.000 description 9
- 230000005540 biological transmission Effects 0.000 description 7
- 238000010586 diagram Methods 0.000 description 6
- 230000008569 process Effects 0.000 description 6
- 230000009467 reduction Effects 0.000 description 5
- 230000035945 sensitivity Effects 0.000 description 4
- ZEFNOZRLAWVAQF-UHFFFAOYSA-N Dinitolmide Chemical compound CC1=C(C(N)=O)C=C([N+]([O-])=O)C=C1[N+]([O-])=O ZEFNOZRLAWVAQF-UHFFFAOYSA-N 0.000 description 3
- 230000008859 change Effects 0.000 description 3
- 231100000572 poisoning Toxicity 0.000 description 3
- 230000000607 poisoning effect Effects 0.000 description 3
- 230000008260 defense mechanism Effects 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 238000012545 processing Methods 0.000 description 2
- 238000004088 simulation Methods 0.000 description 2
- 230000001988 toxicity Effects 0.000 description 2
- 231100000419 toxicity Toxicity 0.000 description 2
- ABEXEQSGABRUHS-UHFFFAOYSA-N 16-methylheptadecyl 16-methylheptadecanoate Chemical compound CC(C)CCCCCCCCCCCCCCCOC(=O)CCCCCCCCCCCCCCC(C)C ABEXEQSGABRUHS-UHFFFAOYSA-N 0.000 description 1
- 206010000117 Abnormal behaviour Diseases 0.000 description 1
- 241000764238 Isis Species 0.000 description 1
- 238000012300 Sequence Analysis Methods 0.000 description 1
- 239000000729 antidote Substances 0.000 description 1
- 238000012550 audit Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- FFBHFFJDDLITSX-UHFFFAOYSA-N benzyl N-[2-hydroxy-4-(3-oxomorpholin-4-yl)phenyl]carbamate Chemical compound OC1=C(NC(=O)OCC2=CC=CC=C2)C=CC(=C1)N1CCOCC1=O FFBHFFJDDLITSX-UHFFFAOYSA-N 0.000 description 1
- 238000006243 chemical reaction Methods 0.000 description 1
- 230000001186 cumulative effect Effects 0.000 description 1
- 238000007418 data mining Methods 0.000 description 1
- 238000000354 decomposition reaction Methods 0.000 description 1
- 230000003247 decreasing effect Effects 0.000 description 1
- 230000007812 deficiency Effects 0.000 description 1
- 230000002950 deficient Effects 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000011156 evaluation Methods 0.000 description 1
- 239000000284 extract Substances 0.000 description 1
- 238000001914 filtration Methods 0.000 description 1
- 238000005417 image-selected in vivo spectroscopy Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 238000007689 inspection Methods 0.000 description 1
- 238000012739 integrated shape imaging system Methods 0.000 description 1
- 230000002045 lasting effect Effects 0.000 description 1
- 238000010801 machine learning Methods 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 239000002574 poison Substances 0.000 description 1
- 231100000614 poison Toxicity 0.000 description 1
- 238000000513 principal component analysis Methods 0.000 description 1
- 230000000750 progressive effect Effects 0.000 description 1
- 238000013179 statistical model Methods 0.000 description 1
- 230000002123 temporal effect Effects 0.000 description 1
- 231100000331 toxic Toxicity 0.000 description 1
- 230000002588 toxic effect Effects 0.000 description 1
- 230000009466 transformation Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/14—Network analysis or design
- H04L41/145—Network analysis or design involving simulating, designing, planning or modelling of a network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/14—Network analysis or design
- H04L41/142—Network analysis or design using statistical or mathematical methods
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0823—Errors, e.g. transmission errors
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
- H04L63/1425—Traffic logging, e.g. anomaly detection
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- General Physics & Mathematics (AREA)
- Mathematical Analysis (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- Algebra (AREA)
- Environmental & Geological Engineering (AREA)
- Computer Hardware Design (AREA)
- Mathematical Optimization (AREA)
- Mathematical Physics (AREA)
- Probability & Statistics with Applications (AREA)
- Pure & Applied Mathematics (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
- Nitrogen And Oxygen Or Sulfur-Condensed Heterocyclic Ring Systems (AREA)
- Medicines Containing Antibodies Or Antigens For Use As Internal Diagnostic Agents (AREA)
- Medicines That Contain Protein Lipid Enzymes And Other Medicines (AREA)
Abstract
Description
Claims (3)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201510414996.5A CN105119734B (zh) | 2015-07-15 | 2015-07-15 | 基于健壮多元概率校准模型的全网络异常检测定位方法 |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201510414996.5A CN105119734B (zh) | 2015-07-15 | 2015-07-15 | 基于健壮多元概率校准模型的全网络异常检测定位方法 |
Publications (2)
Publication Number | Publication Date |
---|---|
CN105119734A CN105119734A (zh) | 2015-12-02 |
CN105119734B true CN105119734B (zh) | 2018-04-17 |
Family
ID=54667632
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201510414996.5A Active CN105119734B (zh) | 2015-07-15 | 2015-07-15 | 基于健壮多元概率校准模型的全网络异常检测定位方法 |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN105119734B (zh) |
Families Citing this family (14)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN106101071B (zh) * | 2016-05-27 | 2019-04-05 | 杭州安恒信息技术股份有限公司 | 一种基于行为触发的防御链路耗尽型cc攻击的方法 |
CN106453392B (zh) * | 2016-11-14 | 2019-04-09 | 中国人民解放军防空兵学院 | 基于流量特征分布的全网络异常流识别方法 |
CN106972968B (zh) * | 2017-03-29 | 2020-04-24 | 北京理工大学 | 一种基于交叉熵联合马氏距离的网络异常流量检测方法 |
CN107426199B (zh) * | 2017-07-05 | 2020-10-30 | 浙江鹏信信息科技股份有限公司 | 一种网络异常行为检测与分析的方法及*** |
CN107688658A (zh) * | 2017-09-05 | 2018-02-13 | 北京奇艺世纪科技有限公司 | 一种异常数据的定位方法及装置 |
CN108733812B (zh) * | 2018-05-21 | 2021-09-14 | 华东师范大学 | 基于全局信息的时间序列数据中异常数据点的识别方法 |
CN109164351A (zh) * | 2018-09-03 | 2019-01-08 | 北京许继电气有限公司 | 基于时间序列的物联网设备监测数据分析方法和*** |
CN110012421A (zh) * | 2019-03-18 | 2019-07-12 | 青岛民航凯亚***集成有限公司 | 一种机场工作车辆定位位置异常点检测方法 |
CN109787846A (zh) * | 2019-03-27 | 2019-05-21 | 湖北大学 | 一种5g网络服务质量异常监测和预测方法及*** |
CN111027721B (zh) * | 2019-11-22 | 2023-07-18 | 中国铁道科学研究院集团有限公司通信信号研究所 | 一种***故障定位方法 |
CN111817875B (zh) * | 2020-06-03 | 2022-06-28 | 华为技术有限公司 | 检测网络故障的方法和装置 |
CN112235134B (zh) * | 2020-09-29 | 2022-08-09 | 中国人民解放军战略支援部队信息工程大学 | 基于ip连接概率分类的路由器所有权探测方法及*** |
CN113949550B (zh) * | 2021-10-08 | 2022-09-09 | 东北大学 | 一种SDN环境下的DDoS攻击检测方法 |
CN117873477B (zh) * | 2024-03-11 | 2024-05-10 | 厦门兰翊星航空设备有限公司 | 一种用于飞行模拟器的仪表数据交互控制管理*** |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101388885A (zh) * | 2008-07-23 | 2009-03-18 | 成都市华为赛门铁克科技有限公司 | 分布式拒绝服务攻击的检测方法和*** |
CN101534305A (zh) * | 2009-04-24 | 2009-09-16 | 中国科学院计算技术研究所 | 网络流量异常检测方法和*** |
CN102075383A (zh) * | 2010-12-29 | 2011-05-25 | 深圳市永达电子股份有限公司 | 一种基于神经网络的低幅值网络流量异常检测方法 |
-
2015
- 2015-07-15 CN CN201510414996.5A patent/CN105119734B/zh active Active
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101388885A (zh) * | 2008-07-23 | 2009-03-18 | 成都市华为赛门铁克科技有限公司 | 分布式拒绝服务攻击的检测方法和*** |
CN101534305A (zh) * | 2009-04-24 | 2009-09-16 | 中国科学院计算技术研究所 | 网络流量异常检测方法和*** |
CN102075383A (zh) * | 2010-12-29 | 2011-05-25 | 深圳市永达电子股份有限公司 | 一种基于神经网络的低幅值网络流量异常检测方法 |
Non-Patent Citations (1)
Title |
---|
MOADA-SVR:一种基于支持向量回归的多元在线异常检测方法;钱叶魁 等;《通信学报》;20110225;第32卷(第2期);第4节 * |
Also Published As
Publication number | Publication date |
---|---|
CN105119734A (zh) | 2015-12-02 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN105119734B (zh) | 基于健壮多元概率校准模型的全网络异常检测定位方法 | |
JP6716297B2 (ja) | 予測信頼性マイニングのためのシステム及び方法 | |
CN107493277B (zh) | 基于最大信息系数的大数据平台在线异常检测方法 | |
US20080270088A1 (en) | Method and system for causal modeling and outlier detection | |
US10003985B1 (en) | System and method for determining reliability of nodes in mobile wireless network | |
CN114978568A (zh) | 使用机器学习进行数据中心管理 | |
CN110138614B (zh) | 一种基于张量模型的在线网络流量异常检测方法及*** | |
CN110460622A (zh) | 一种基于态势感知预测方法的网络异常检测方法 | |
Hou et al. | Detection and characterization of network anomalies in large-scale RTT time series | |
Chang et al. | Addressing multicollinearity in semiconductor manufacturing | |
CN115237717A (zh) | 一种微服务异常检测方法和*** | |
CN117319047A (zh) | 一种基于网络安全异常检测的网络路径分析方法及*** | |
Xu et al. | An improved methodology for outlier detection in dynamic datasets | |
Zhang et al. | Using the expected detection delay to assess the performance of different multivariate statistical process monitoring methods for multiplicative and drift faults | |
Dinh et al. | Assessing attack vulnerability in networks with uncertainty | |
Chen et al. | An efficient solution to locate sparsely congested links by network tomography | |
Ni et al. | Information dynamic spectrum characterizes system instability toward critical transitions | |
Lin et al. | A diagnoser algorithm for anomaly detection in DEDS under partial and unreliable observations: characterization and inclusion in sensor configuration optimization | |
Singh et al. | Unified framework for developing two dimensional software reliability growth models with change point | |
Younis et al. | Towards the Impact of Security Vunnerabilities in Software Design: A Complex Network-Based Approach | |
Zhang et al. | PCA-based network-wide correlated anomaly event detection and diagnosis | |
Li et al. | Detecting network-wide traffic anomalies based on robust multivariate probabilistic calibration model | |
Marseguerra et al. | The impact of the operating environment on the design of redundant configurations | |
Chatzigiannakis et al. | On the realization of a generalized data fusion and network anomaly detection framework | |
CN113032774A (zh) | 异常检测模型的训练方法、装置、设备及计算机存储介质 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
CB03 | Change of inventor or designer information |
Inventor after: Qian Yekui Inventor after: Ye Lixin Inventor after: Zhu Shaowei Inventor after: Li Yuli Inventor after: Du Jiang Inventor after: Huang Hao Inventor after: Yang Ruipeng Inventor after: Luo Chaofeng Inventor before: Qian Yekui Inventor before: Jiang Wenfeng Inventor before: Huang Hao Inventor before: Zou Fuchun Inventor before: Li Yuli Inventor before: Liu Fengrong Inventor before: Ye Lixin Inventor before: Zhao Xin Inventor before: Zhang Zhaoguang Inventor before: Li Bainan Inventor before: Liu Jianqiang Inventor before: Li Tao |
|
CB03 | Change of inventor or designer information | ||
GR01 | Patent grant | ||
GR01 | Patent grant |