APPARATUS AND METHOD FOR DETECTING ANOMALY OF NETWORK

摘要

Disclosed are an apparatus and method for detecting an anomaly of a network and a recording medium on which the method is recorded. The method for detecting an anomaly in a network measures self-similarity from at least one attribute information representing a traffic state of the network in a normal state in advance to set a critical value for the self-similarity, measures self-similarity in real time from the at least one attribute information in the network, and determines an anomaly of the network by comparing the measured real-time self-similarity value with the set critical value.

主权项

1. A method for detecting an anomaly in a network according to a predetermined standard by using a detection device having at least one processor in the network, the method comprising:
measuring self-similarity from at least one attribute information representing a traffic state of the network in a normal state in advance and setting a critical value for the self-similarity; measuring self-similarity in real time from the at least one attribute information in the network; and determining an anomaly of the network by comparing the measured real-time self-similarity value with the set critical value.