Anomaly detection of large scale network based on data streams;

Under the situation of current IDSs have no good performance to meet the large scale network s need.

Based on the discussions, the empirical model of IP flows distribution for large-scale networks is proposed based on the characteristics analysis, whose precision is better than Pareto model, and the complexity is less than double Pareto model.

Based on the former research on IP flows arrival distribution, this paper analyzed the interarrival time distribution and the autocorrelation of IP flows coming from different large-scale networks.

Analysis of BitTorrent flow behavior on large-scale networks;

In large-scale networks,the 1D fast recursion CBP (Call-Blocking Probability) algorithm proposed by Kaufman is unavailable due to the data overflow caused by the calculation of CBP.

An anomaly detection model based on the multi-feature similarity in large-scale network is proposed in this paper.

With the rapid development of computer and network technology, many organizations have established Intranets which can promote information process, but the existence of violated network services in Intranets have brought many problems to management and security.