METHOD AND SYSTEM OF NETWORK TRAFFIC ANALYSIS FOR ANOMALOUS BEHAVIOR DETECTION

摘要

One embodiment according to the invention, the system for analyzing network traffic includes: data collection module, for collecting data on flows; Character factor extraction unit extracts data of the network characteristic factor from above-mentioned acquisition; Cluster generation unit is used for the extracted characteristic factor of cluster; Resolution unit, for extracting isolate, by analysis cluster; With abnormal host determination unit, determine abnormal host from above-mentioned outlier. ;The 2015 of copyright KIPO submissions