论文部分内容阅读
由于相当一部分异常流量由于采用了特殊的生成机制而在结构上有别于遵循基本网络协议的正常流量,本文提出了一种基于IP报文Identification标识字段分布识别网络中异常流量的方法。通过CERNET网络不同时段的IP报文检测结果证明了该方法的准确性。
Since a considerable part of abnormal traffic is structurally different from the normal traffic that follows the basic network protocol due to the special generating mechanism, a method of identifying abnormal traffic in the network based on identification of IP packet identification is proposed in this paper. Through the CERNET network in different periods of IP packet test results prove the accuracy of the method.