Anomaly Traffic Integrated Detection Model for Enterprise IT Network
Zhipeng Gao · Beijing Youdian Xueyuan xuebao · 2009
A new algorithm of the network anomaly traffic detection by using time windows comparing method is proposed based on the feature of enterprise information technology(IT) network traffic.Then,combining the new algorithm,the present static detection algorithm and the dynamic detection algorithm,the integrated detection model of network anomaly traffic is proposed.The model can check the network anomaly traffic by comparison methods by different ways and from different views.Finally,the availability of model is validated by implementation and testing of model in real environment.