%0 Journal Article
%T Worm detection technology research of net-flow dynamic critical line established based on statistical analytic method<br>基于统计分析建立流量动态临界线的蠕虫检测机制研究
%A WANG Yong-chaoa
%A XIE Yong-kaia
%A ZHU Zhi-pinga
%A LIN Huai-zhongb
%A <br>王勇超
%A 谢永凯
%A 朱之平
%A 林怀忠
%J 计算机应用研究
%D 2010
%I 
%X This paper raised a method detect the abnormal net-flow based on normal distribution, then estimated the existence of Internet worm in internal network. According to the normal distribution character of the history flow, this method computed the normal behavior trusted zone of data flow in network, judged the inspected flow abnormal flow if it went beyond the trusted zone, and alarmed the threat of Internet worm. Combined with this method, further analyzed how to use two-factor model ana-lysis of the number of Internet worms in network.
%K normal distribution
%K traffic statistic
%K trusted zone
%K worm<br>正态分布
%K 异常流量
%K 可信区间
%K 蠕虫
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=A9D9BE08CDC44144BE8B5685705D3AED&aid=A715015DAF0645269A15257C7BF36EB7&yid=140ECF96957D60B2&vid=DB817633AA4F79B9&iid=38B194292C032A66&sid=31CCC5D591A72A74&eid=78996380F3108204&journal_id=1001-3695&journal_name=计算机应用研究&referenced_num=0&reference_num=7