EQUIPMENT AND METHOD FOR NETWORK ABNORMAL TRAFFIC ANALYSIS

摘要

The present invention provides a method for network abnormal traffic analysis，and the method includes: the index value set of monitored server is calculated according to the collected IP network data; the calculated index value set is detected for the first time to generate the vector corresponding to the index value set; and the vector is detected for the second time to confirm whether the abnormal traffic and anomaly type related to the monitored server exists. The present invention also provides a corresponding equipment for network abnormal traffic analysis, and a system and a method for network traffic surveillance adopting these network abnormal traffic analysis methods and equipments.