Application identification processing method and device
A technology of application identification and processing methods, applied in the field of application identification processing methods and devices, which can solve problems such as crowding out network resources and affecting the normal work of enterprises, and achieve the effect of ensuring accuracy
Active Publication Date: 2013-02-20
NSFOCUS INFORMATION TECHNOLOGY CO LTD +1
View PDF5 Cites 14 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0002] With the continuous emergence of network applications, more and more complex security risks are hidden in various network applications, such as: attacks using web service security vulnerabilities, and some bandwidth-consuming applications, streaming media, video downloads, etc., crowding out normal network resources, seriously affecting the normal work of enterprises, network security management is facing new challenges and new problems
[0003] Based on the above reasons, it is very important to identify various applications for network management and network security, but there is a lack of a fast and accurate method for identifying applications in the prior art
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0029] figure 1 It is a schematic flow chart of Embodiment 1 of the application data packet acquisition method of the present invention, such as figure 1 As shown, the method includes:
[0030] Step 10, analyzing the packet capture file corresponding to the application, and obtaining the sessions in each packet capture file;
[0031] In the specific implementation, firstly, traverse all the packet capture (pcap) files at the specified location, and analyze the names of these pcap files, and then classify all the pcap files according to the application, and obtain the pcap file list corresponding to the application; among them, These pcap files are manually obtained from a large number of applications and stored in the specified location above. Each application will obtain multiple pcap files. Generally speaking, each application obtains 5 to 10 pcap files;
[0032] Then, in the above pcap file list corresponding to the application, each time a pcap file of an application is ...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention provides an application identification processing method and device. The application identification processing method comprises: analyzing capture files corresponding to applications, and obtaining conversions in each capture file; performing feature extraction on the conversions, and obtaining application feature information; performing matching verification on the application feature information, and obtaining feature hit rate corresponding to the application feature information; and adopting the application feature information with the highest hit rate to perform identification processing on the applications. By obtaining the feature information of the applications, corresponding applications can be identified according to the feature information, and accuracy of the identification applications can be ensured through matching verification.
Description
technical field [0001] The invention relates to network security technology, in particular to an application identification processing method and device. Background technique [0002] With the continuous emergence of network applications, more and more complex security risks are hidden in various network applications, such as: attacks using web service security vulnerabilities, and some bandwidth-consuming applications, streaming media, video downloads, etc., crowding out normal Network resources have seriously affected the normal work of enterprises, and network security management is facing new challenges and new problems. [0003] Based on the above reasons, it is very important to identify various applications for network management and network security. However, a fast and accurate method for identifying applications is lacking in the prior art. Contents of the invention [0004] In view of the above defects, the present invention provides an application identificati...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
Inventor 韩鹏李伟超杨硕飞鲁迅陈裕涛卢蓉刘海霞
Owner NSFOCUS INFORMATION TECHNOLOGY CO LTD