Research and Application of Network Anomaly Traffic Detection System
Xin Yue, Guangming Bo, Jianxun Zhang · Procedia Computer Science · 2022
This paper puts forward a network security computing platform which based on the open source big data technology. This network anomaly traffic detection system includes a comprehensive and effective traffic anomaly detection algorithm. The algorithm combines the exponentially weighted moving average algorithm (EWMA) and the anomaly flow interval mapping algorithm two methods. The test experiments contain the physical cluster building parameters, the performance of the system and the DDoS attack verification. It is verified by the Tianjin Education metropolitan area network traffic and the NSFOCUS against denial attack event log service system (NSFOCUS ANTI-DDoS system). In Particular, the network anomaly traffic detection system can accurately identify the occurrence period of anomaly traffic such as the flow direction and the event priority. What’ more, it has strong fault tolerance which can achieve error recovery in a short time. All the test experiment results can verify that the system can effectively detect anomaly traffic and real-time monitor the dynamic network.