一种基于时间序列的自适应网络异常检测算法

传统的网络管理工具通常是根据预先设定的阈值进行网络流量异常检测,这种方法虽然简单,但不能根据网络状况进行自适应的动态调整.分析了基于时间序列的Holt-Winters异常检测方法,结合建立的历史流量的正常模型,改进了Holt-Winters模型的基值以及平滑因子参数的获取过程,加快了算法的启动时间,缩短了算法对网络环境的自适应时间.改进的Holt-Winters算法相较于原来的Holt-Winters算法以及阈值检测方法检测的正确率更高、误报率更低.

Adaptive aberrant network traffic detection algorithm based on time series forecast

The traditional network management tools usually detect aberrant network traffic according to the preset threshold.This method is straightforward,but it has poor adaptability.Therefore,A mature aberrant detection method called Holt-Winters based on the time series forecast was described.But it needed a long time to adapt the real network environment when the algorithm model applied.To solve these problems,based on the statistics of huge history network flow model,an increased Holt-Winter algorithm was propo...