Comparative Studies on two Methods of Data Collection Technology in Network Traffic Anomaly Detection
Zhigui Liu · Computer Knowledge and Technology · 2009
Internet is free and open to people,and at the same time security risks can not be ignored.Network and information security has increasingly become the focus of our attention.As the important part of network security,network traffic anomaly detection technology gradually has been studied more and more.This paper mainly focus on two comparative studies on two methods of network traffic collec-tion(one is packet-based data collection method,another is flow-based data collection method),and gives the simulation results.