| 摘要 |
PROBLEM TO BE SOLVED: To reduce load due to consumption of resources for maintaining a flow in a network abnormality detecting system for integrating network traffics for each flow and digitizing the traffics for each flow to evaluate the degree of abnormality. SOLUTION: Gradual detection of network abnormality is performed by a means for reducing the load due to resource consumption to detect an abnormality candidate by observing network traffics for each slot with a predetermined interval, and contriving to reduce the number of target flows without causing the reduction of a detection rate of network abnormality in a first step; and a means for digitizing a detected abnormality candidate for each flow to evaluate the degree of abnormality in a second step. COPYRIGHT: (C)2006,JPO&NCIPI
|
