The Influence of Port Scanning from Packet Sample and it’s Improved Method
Zhang Hai · Computer Knowledge and Technology · 2012
Port scaning detection is an important part of network security system.Packed sample is largely used in high speed backbone network.Here we analyse the influence of packed sample on the TWR detecting method,then we propose an im proved method.It reduces the probability of incorrect detecting by the information of TCP sequence which improve distribu tion estimate of original stream.