Dbappsecurity Co., Ltd

Weijie Hao

Bo Liu

Wenhai Wang

Peng Ye

Disclosed are a method and apparatus for detecting traffic anomaly, a device and a medium. The method includes: performing a network topology division operation on a network topology architecture to be detected, so as to obtain a plurality of security domains; acquiring a regional full traffic in each of the plurality of security domains, determining a traffic characteristic time series on the basis of regional full traffics, and analyzing the traffic characteristic time series to obtain a new traffic characteristic time series; constructing a traffic anomaly detection model, and performing distributed anomaly detection on the traffic characteristic time series by the traffic anomaly detection model, so as to obtain a detection result; and sending the detection result to an information processing center, so that the information processing center obtains anomalous asset devices and anomalous information according to the detection result.

Growing community of inventors

Hangzhou, China

Weijie Hao