Abstract:
A scheme increasing the safety of computer networks on the basis of the analysis of network traffic is offered in the paper. Its advantages are the following: response speed to threats, minimum use of computational resources of the system, lack of the necessity to develop packets and, as a result, independence from the signatures of harmful programs. The proposed scheme can be used to automate the detection of anomalies in the amount of network traffic, both internal and external network. Input parameters can be described with quality values, allowing you to develop a framework of rules for the formulation of responses to a specific situation.
Keywords:computer networks, security, analysis and forecasting of network traffic.