%0 Journal Article
%T Research of Internet worm infection probability estimation based on comprehensive analysis of net-flow and packets<br>通过流量和数据包综合估计内网感染蠕虫概率的研究
%A WANG Yong-chao
%A XIE Yong-kai
%A ZHU Zhi-ping
%A DONG Ya-bo
%A <br>王勇超
%A 谢永凯
%A 朱之平
%A 董亚波
%J 计算机应用研究
%D 2010
%I 
%X This paper presented a method of analyzing the probability of Internet worm infection in internal network. Analyzed the packets through the switch in network by using the active of Internet worm, acquired the amount of abnormal packets, then analyzed the number of abnormal packets to get the abnormal packets rise rate by using AR model. Weighted the abnormal flow and abnormal packets rise rate in internal network, comprehensively estimated them and got the probability of Internet worm infection in internal network. The experiment results show that the method is effective and feasible.
%K abnormal packets
%K AR model
%K abnormal flow
%K weight
%K probability<br>异常数据包
%K AR模型
%K 异常流量
%K 加权
%K 概率
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=A9D9BE08CDC44144BE8B5685705D3AED&aid=7DCB59CA45BDB71FD18C86A32AD6D5B4&yid=140ECF96957D60B2&vid=DB817633AA4F79B9&iid=CA4FD0336C81A37A&sid=FE4C96E058BB2280&eid=1DF3F9D75A12D97B&journal_id=1001-3695&journal_name=计算机应用研究&referenced_num=0&reference_num=7