论文部分内容阅读
高速网络中的流量分析越来越困难,使用sflow抽样数据流来进行高速网络行为分析的成为应对网络安全的新方法。网络行为分析可以发现网络中来自外部的攻击或内部的异常,解决部分高带宽、大流量和入侵检测漏检和误报等现有的问题。
Traffic analysis in high-speed networks is becoming more and more difficult. The use of sflow sampling data streams to perform high-speed network behavior analysis becomes a new approach to network security. Network behavior analysis can be found in the network from external attacks or internal anomalies, to solve part of the high bandwidth, high traffic and intrusion detection missing and false positives and other existing problems.