%0 Journal Article
%T Anomaly network traffic detection based on modified CUSUM algorithm<br>基于改进CUSUM算法的网络异常流量检测
%A BU Shan-yue
%A ZHANG Hai-yan
%A WANG Ru-chuan
%A <br>步山岳
%A 张海艳
%A 王汝传
%J 计算机应用研究
%D 2009
%I 
%X It should be more efficient to detect the anomaly of network traffic firstly rather than to analyze the data packets directly.This paper proposed an auto-adapted algorithm to eliminate the cumulative effect occurring when detecting anomalies of network traffic based on the CUSUM algorithm,then investigated the influence on setting parameters of the delay time of alarm relieving and failing alarm,etc.The experiment shows that the algorithm is effective and correct,which can improve the accuracy of anomaly traffic detection and reduce the operation cost.So it can be directly applied in detecting SYN flooding attacks and so on.
%K traffic detection
%K CUSUM(cumulative sum) algorithm
%K EWMA(exponential weighted moving average)algorithm
%K alarm threshold<br>流量检测
%K 累积和算法
%K 指数加权滑动平均值算法
%K 报警阈值
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=A9D9BE08CDC44144BE8B5685705D3AED&aid=CFE5700C7142AD097EAD31E7F59C9453&yid=DE12191FBD62783C&vid=96C778EE049EE47D&iid=0B39A22176CE99FB&sid=8566B4AE2A8832E3&eid=3054A11AD1D7E34A&journal_id=1001-3695&journal_name=计算机应用研究&referenced_num=1&reference_num=8