METHOD FOR CHARACTERISING ENTITIES AT THE ORIGIN OF FLUCTUATIONS IN A NETWORK TRAFFIC

摘要

The invention relates to a method for characterising entities at the origin of at least one fluctuation detected in a network traffic, wherein said method is characterised in that it includes: a step (E11) of determining an adequate analysis period that includes at least one suspect time slot, the suspect time slot including the fluctuation detected in the traffic; a step (E14-1) of evaluating, for an entity (CK) contributing to the network traffic, a value representative of the traffic similarity between a portion of the traffic that can be linked to said entity and the network traffic during the adequate analysis period, said evaluation step being carried out for a plurality of entities contributing to the network traffic; and a step (E14-2) of identifying, among the plurality of entities involved in the network traffic, a group of entities responsible for the traffic fluctuation from the evaluated traffic similarity values.