Method for digging recognition characteristic of application layer protocol

An application layer protocol and feature recognition technology, applied in digital transmission systems, electrical components, transmission systems, etc., can solve the problems of low recognition efficiency, incomplete recognition features, and low feature extraction efficiency

Inactive Publication Date: 2008-10-08
INST OF COMPUTING TECH CHINESE ACAD OF SCI
View PDF0 Cites 29 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0009]However, relying on manual analysis to realize the mining method of application layer protocol identification features, the feature extraction efficiency is very low, which cannot meet the continuous emergence of new applicatio

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method for digging recognition characteristic of application layer protocol
  • Method for digging recognition characteristic of application layer protocol
  • Method for digging recognition characteristic of application layer protocol

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0079] In order to make the purpose, technical solution and advantages of the present invention clearer, a method for mining application layer protocol identification features of the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

[0080] The present invention proposes a method for mining application layer protocol identification features. The method only needs to capture the data packet set in the communication process of the application layer protocol, and the application layer can be extracted by analyzing and mining the data packet set. All the recognition features of the protocol, the feature extraction efficiency and the overall recognition rate are greatly improved compared with the prior art.

[0081] In order to better illustrate a kind of app...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method for digging identification characteristics of application layer protocol. The method comprises the following steps of: A, filtering firstly and coding a training data packet set, extracting standard protocol identification characteristic data information; B, performing a first digging to the extracted standard protocol identification characteristic data information to obtain a multistage frequent set; C, performing the first digging to the multistage frequent set, and correcting frequent degree of the rest multistage frequent set after the first digging, performing a second digging to obtain final protocol identification characteristics; D, if byte identification rate of all the final protocol identification characteristics meets the demand, or the total identification rate of the data packet meets the demand, no longer digging the data of the second and the subsequent data packets; otherwise, circularly digging the second and the subsequent data packets until the total identification rate meets the demand. The invention can analyze, dig the data packet set, and extract all the identification characteristics of the corresponding application layer protocol, which greatly improves characteristic extraction efficiency and the total identification rate.

Description

technical field [0001] The invention relates to the technical field of computer network flow monitoring and analysis, in particular to a mining method for application layer protocol identification features. Background technique [0002] Network application layer traffic identification is crucial to network planning, network management, traffic engineering, security detection, etc. The traditional application layer identification method is mainly based on the Internet Assigned Numbers Authority (IANA) to define the protocol port corresponding to the application, but for the purpose of hiding traffic or other aspects, the existing technology uses a large number of dynamic protocol ports or encrypted data Packet load, which brings great challenges to traditional application layer identification methods. [0003] In order to solve this problem, a deep packet inspection (Deep Packet Inspection, DPI) identification method has been proposed. The method finds out the characteristi...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L12/26H04L29/06
Inventor 刘兴彬杨建华胡玥谢高岗
Owner INST OF COMPUTING TECH CHINESE ACAD OF SCI
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products