关键词: PGA NMF算法, 网络流量矩阵, 残余矩阵, 异常检测模型, Q图

Abstract:

A network traffic matrix is established based on information entropy by sampling the network traffic data and filtering noise by spatial variability of wavelet.the PGM-NMF algorithm is used for network traffic matrix decomposition to build residual matrix based on nonnegative subspace method.The network traffic anomaly detection is achieved by Q plot.Theoretical and experimental results show that PGM-NMF has a better detection performance than PCA in network traffic anomaly detection.

Key words: PGM NMF algorithms;network traffic matrix;residual matrix;anomaly intrusion detection model;Q plot