Electronic Science and Technology ›› 2019, Vol. 32 ›› Issue (12): 17-21.doi: 10.16180/j.cnki.issn1007-7820.2019.12.004

Previous Articles     Next Articles

A Real-time Full Network Performance Anomaly Detection Algorithm Based on Principal Component

ZHANG Tianqi,ZHANG Shunkang   

  1. School of Computer Science and Technology,Nanjing University of Aeronautics and Astronautics,Nanjing 211106,China
  • Received:2018-12-05 Online:2019-12-15 Published:2019-12-24
  • Supported by:
    Postgraduate Research & Practice Innovation Programe of Jiangsu Province(KYCX18_0308)


Network performance anomaly detection is of great significance to promote the healthy development of the network. In order to solve the problem that the existing anomaly detection methods are mostly offline and cannot provide good real-time online detection performance, the principal component analysis method was used to establish the anomaly detection model, and the network anomaly detection threshold was adjusted adaptively by combining historical performance data with recent network performance fluctuations. The real-time online anomaly detection was realized and the data was collected on NFV network. The experimental results showed that the proposed method reduced the false alarm rate by 5% to 8% compared with the offline detection method which was widely used, indicating the greater use value of the proposed method for network operators.

Key words: anomalydetection, network performance matrix, principal component analysis, slidingwindow, dynamicthreshold, online real-time monitoring

CLC Number: 

  • TP915.08