Anomaly Behavior Detection Method of Macro Network Traffic Based on EBP
Xiaodong Xu · Jisuanji gongcheng · 2009
Because the previous estimation methods lack of accuracy and real-time performance in solving the Hurst index, EBP is introduced to the analysis of network traffic self-similarity.The contrast experiments show that EBP is more accurate and has higher real-time performance than other methods in the Hurst index estimation.Taking these advantages of EBP, it is applied to online, real-time analysis of the macro network and the anomaly behavior detection.The analysis on macro network behavior data of Lincoln laboratory shows that the Hurst distribution curves between normal and abnormal behavior have obvious differences.Compared with the traditional method of matching, anomaly behavior detection method based on EBP is more efficient.