摘要
针对传统的异常信息流检测方法的不足,设计了一种基于流量分析的网络隐蔽通道检测模型,它采用了概率统计中的泊松分布和数据挖掘中的聚类分析等方法,开辟了一条检测信息暗流的新途径。
As the traditional methods of abnormal information stream detecting are limited too much in function, this paper produces a model based on traffic analysis, which can detect network covert channel in another way. In the model, Poisson distribution in statistics and clustering analysis in data mining are introduced.
出处
《计算机工程》
CAS
CSCD
北大核心
2002年第12期46-48,284,共4页
Computer Engineering
基金
国家863信息安全课题资助(2001AA144070)