Network abnormal flow analytical instrument and method

摘要

This invention calculates the index value set of the supervisory object server on the basis of the IP network data which is collected, executing the first inspection vis-a-vis the index value set which was calculated, forms the vector which corresponds to the aforementioned index value set, executing second inspection vis-a-vis the aforementioned vector, whether or not the abnormal flow which it is related to the aforementioned supervisory object server exists and abnormal similar type is decided, network abnormal flow analysis method is offered. As for this invention, in addition, the network abnormal flow analytical instrument, and these network abnormal flow analysis methods and of using the device the network flow monitoring system and the method of being related are offered.