Communication network abnormal behavior detection method based on random block model

Abstract

The invention discloses a communication network abnormal behavior detection method based on a random block model. The communication network abnormal behavior detection method comprises the following steps: step 1, processing network data: extracting a destination IP address of a source IP address from the obtained network data; step 2, constructing an adjacent matrix A; step 3, determining a random block model input matrix; step 4, inputting the matrix through the random block model to obtain a network topological graph; step 5, calculating a z-score value; step 6, judging whether the networkis abnormal or not according to the z-score value. The technical problems that in the prior art, for network abnormal behavior detection, interaction information between network data is not considered, and characteristics of communication network behaviors cannot be comprehensively displayed are solved.

Description

technical field [0001] The invention belongs to network anomaly detection technology, in particular to a communication network anomaly behavior detection method based on a random block model. Background technique [0002] With the development of the Internet and the continuous growth of business volume, the communication network is developing in the direction of high speed, diversification, and complexity. While the network provides people with great convenience, abnormal behavior of the communication network also emerges as the times require. The service rate of the network is reduced, people's network experience is reduced, and the security, reliability and efficiency of network communication have become our focus. [0003] Abnormal network behaviors are characterized by sudden onset, unknown aura characteristics, and massive consumption of network resources, resulting in network congestion, decreased network link utilization, and significantly reduced network service qual...

AI Technical Summary

Problems solved by technology

[0007] The technical problem to be solved by the present invention is to provide a communication network abnormal behavior detection method based on a random block model, so as to solve the problem that the existing technology does not consider the interaction information between network data and cannot fully display the abnormal behavior detection of the network. Technical issues such as characteristics of communication network behavior

Images