【正文】 evaluation of scientific development. 　　Nature security typenature security is to maintenance people of health value for target, through strengthening security based management, and risk management, and equipment management and technology supervision, ensure production in the people, and real, and system, and system, elements security reliable, and harmony unified, full control various against factors, achieved thought no slack, and management no empty document, and equipment no hidden, and system no blocked, and unit zero nonstopped. 　　Quality and efficiencyquality benefit is to adhere to the enterprise survival, profit and development business truth, adhere to the all activity is economic activity, all costs can be controlled, money should not be wasted management philosophy, management analysis, to improve management quality, improve cost control capacity and market petitiveness. 　　Innovation of science and technologyscience and technology innovation is to play the role of science and technology as the primary productive force, active use of new technologies, new materials, new processes, new equipment, increase investment in science and technology, strengthening scientific and technological training, speeding up transforming scientific and technological achievements, forming a number of proprietary technology, enhancing core petitiveness. Resourcesavingtheresources saving enterprise was to reduce coal consumption, water consumption, electricity at the core, enhance the operation of lean management to realize low consumption, high efficiency, reduce production costs. 　　Second is to strengthen the business, financial, material, information and the optimization of organization and management, saving the internal transaction costs. Harmonious development of harmonious developmentis to construct a foreign environment for development. XING refers to the internal security firm and internal management of the internal management measures are effective, harmonious. 　　Foreign currency means Enterprise coordinating development of homeopathy, well, get along with the neighbors better. (B) XX 2013 five enterprises building intrinsic safety power pany goals are: unplanned outage 0 times. Class of disorders 0, 0 is equivalent forced outage rate. No personal injury accident, material and equipment accidents do not occur, no fire, no environmental pollution accident. 　　Enterprise integrated to achieve zero cases of violation, zero accidents, zero. Quality goal is: when generating capacity ≥ billionkilowatt, sales of over billion kWh, total profits of ≥ million Yuan, ... BFS++、PI、MIS、SCM Information systems infrastructure, fully integrated information system to realize information resources sharing。 to expand the breadth and depth of the portal system, information system of Enterprise Management Assistant role to play。 to improve the daytoday operation and maintenance operation record of promoting causes and transfer system。 to strengthen the training分類號：TP391 520．3040 密級：基于云計算的異常流量檢測系統(tǒng)的實現(xiàn)(申請碩士學(xué)位)學(xué)科專業(yè)：計算機(jī)應(yīng)用技術(shù)研究方向：網(wǎng)絡(luò)安全摘 要 互聯(lián)網(wǎng)異常是指影響網(wǎng)絡(luò)性能或造成數(shù)據(jù)破壞的事件，這些事件通常會引起某些流量特征違反某種已建立的模式或標(biāo)準(zhǔn)，分析流量特征在異常情況下的變化，并以之為基礎(chǔ)進(jìn)行異常檢測的應(yīng)用研究，可以及時地發(fā)現(xiàn)網(wǎng)絡(luò)異常、診斷網(wǎng)絡(luò)錯誤，對互聯(lián)網(wǎng)的安全運(yùn)行和管理具有重要的意義。NetFlow是一種數(shù)據(jù)交換方式，一個NetFlow流定義為在～個源IP地址和目的IP地址問傳輸?shù)膯蜗驍?shù)據(jù)包流，且所有數(shù)據(jù)包具有共同的傳輸層源、目的端口號。Netflow數(shù)據(jù)中包含了網(wǎng)絡(luò)異常檢測所需要的流量特征，可以利用Netflow數(shù)據(jù)所提供的網(wǎng)絡(luò)流量特征分析當(dāng)前網(wǎng)絡(luò)所處的狀態(tài)。目前的基于Netflow的異常檢測尚有很多不足：1)高的誤檢率；2)多數(shù)方法難以達(dá)到高速鏈路的實時在線檢測需求；3)Netflow數(shù)據(jù)量較大，對于歷史數(shù)據(jù)不能有效的存儲：4)全網(wǎng)異常檢測方法較少且問題較多。云計算通過整合互聯(lián)網(wǎng)絡(luò)中的閑散資源，對外提供強(qiáng)大的存儲和計算能力，以及一些其它解決方案。Hadoop是一個開源分布式數(shù)據(jù)處理框架，被用于高效地處理海量數(shù)據(jù)。由于Hadoop具有可伸縮性、高可靠性、低成本性和高效性等優(yōu)點，已成為一種流行的云計算開發(fā)平臺。Hadoop提供了云計算所需要的眾多功能：HDFS分布式文件系統(tǒng)、MapReduce計算模型、HBase分布式NoSQLN數(shù)據(jù)庫等。利用云計算開發(fā)平臺我們可以解決網(wǎng)絡(luò)數(shù)據(jù)存儲和異常檢測的眾多問題。本文以互聯(lián)網(wǎng)異常流量特征的分析為基礎(chǔ)，利用Hadoop云；計算開發(fā)平臺，進(jìn)行異常檢測的應(yīng)用研究，實現(xiàn)了一個基于云計算的異常流量檢測系統(tǒng)。本文主要研究內(nèi)容和貢獻(xiàn)如下：1．提出一種基于包數(shù)據(jù)流量特征的分析方法，并應(yīng)用這種方法對流量特征的異常變化進(jìn)進(jìn)行了分析。主要結(jié)果是正常流量特征分布在小的時間尺度上具有一定的穩(wěn)定性，而異常流量會導(dǎo)致部分流量特征的分布產(chǎn)生明顯的變化，從而打破這樣的穩(wěn)定性。2．提出了用于檢測互聯(lián)網(wǎng)異常的十維異常流量分析指標(biāo)，利用分析指標(biāo)的變化情況分析網(wǎng)絡(luò)中存在的異常流量，使用分析指標(biāo)的不同變化檢測網(wǎng)絡(luò)中未知的異常流量。3．利用Hadoop搭建云存儲平臺，利用HDFS分布式文件系統(tǒng)存儲大量的netflow數(shù)據(jù)文件，HDFS有著高容錯性的特點，并且設(shè)計用來部署在低廉的硬件上。HDFS的高吞吐量使得其尤其適用于大數(shù)據(jù)集的程序。4．將MapReduce計算模型用于異常流量分析的過程之中，簡化了計算步驟，加快了方法的檢測效率，增強(qiáng)了異常流量檢測的實時性。supervision in large and medium goods vehicle. 　　A is established large vehicles and small vehicles classification management of motor vehicle test mode, increased medium van car, and dangerous goods transport car, and school car test project。 II is established motor vehicle test regulatory platform, achieved motor vehicle test full process video, and data remote regulatory。 three is strictly motor vehicle identification management, equipped with unified of identification equipment and tool, using mobile identification Terminal, and law enforcement records instrument, technology identification means. As to 20XX years June 20 statewide motor vehicle keep volume for 567,408 car, and last year earlier than growth 75,814 car, growth %。 this year JanuaryJune, vehicles management section and license archives management section total accepted the motor vehicle registration business 42,543 car times, which registered registration 6,905 car times, and transfer registration 3,592 car times, and change registration 1033 car times, and mortgage registration 696 car times, and cancellation registration 187 car times, and into business 980 car times, and Archives corrections 81 pieces times, and issued test qualified logo 25,429 car times, and other vehicles business 3,640 car times。 supervision Survey Section relies on motor vehicle detection remote issued test qualified logo software platform supervision motor vehicle test, and identification situation 7418l liangci, investigation motor vehicle exception business 30 car times, his pards business warning 244 article, vehicles and driving people sound video regulatory screenshots 1852 Zhang, checks motor vehi