Protocol analyzing method based on DFA (Deterministic Finite Automaton)

A protocol and field technology, applied in the field of protocol analysis, can solve the problem of poor scalability of the protocol analysis method, and achieve the effect of improving the speed of protocol analysis

Active Publication Date: 2013-07-03
ZHENGZHOU SEANET TECH CO LTD
View PDF3 Cites 7 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, the hardware-based protocol analysis method has the defect of poor scalability and can only be applied to some preset fixed scenarios

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Protocol analyzing method based on DFA (Deterministic Finite Automaton)
  • Protocol analyzing method based on DFA (Deterministic Finite Automaton)
  • Protocol analyzing method based on DFA (Deterministic Finite Automaton)

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0019] The technical solutions of the present invention will be described in further detail below with reference to the accompanying drawings and embodiments.

[0020] The present invention proposes a fast protocol parsing method using a DFA engine. First, a pattern matching search tree is constructed according to the pattern strings in the co-format to be parsed, and each node of the search tree is used as a different state of the DFA state machine, and the DFA engine is used to analyze the original The text is quickly matched and searched. After finding the corresponding pattern string in the protocol, the location information of the protocol content is given, and the corresponding protocol content can be further analyzed. The present invention greatly improves the protocol analysis speed by combining multi-pattern matching with the DFA engine.

[0021] figure 1 It is a flowchart of a DFA-based protocol analysis method according to an embodiment of the present invention.

...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a protocol analyzing method based on DFA (Deterministic Finite Automaton). The protocol analyzing method comprises the following steps of: acquiring a field name and a field decollator in to-be-analyzed protocol content; by using the field name and the filed decollator as a mode string, establishing a mode search tree according to the mode string; based on the mode search tree and the to-be-analyzed protocol content as the input of a finite state automat DFA, matching the mode string in the to-be-analyzed protocol by utilizing the DFA; and extracting the protocol field value in the to-be-analyzed protocol content according to the matching result. According to the protocol analyzing method based on the DFA, on one hand, the mode search tree is constructed by using a character string multi-mode matching; and on the other hand, each node in the mode search tree is constructed as each status in the DFA by using a DFA engine, so that the quick matching of the character string is realized by the DFA engine, and therefore, the protocol analyzing speed is greatly improved.

Description

technical field [0001] The invention relates to protocol analysis, in particular to a DFA-based protocol analysis method. Background technique [0002] Protocol is a way of communication in various computer applications and between applications, and protocol analysis has become an indispensable technology, especially in network applications. The communication parties encapsulate the communication content in the protocol, and then pass the protocol string to the other party. Furthermore, the speed of parsing out the protocol content from the protocol string directly affects the performance of the system. [0003] Protocol parsing, its essence is to search for the protocol field in the string. At present, the main methods include pure software protocol analysis, protocol analysis based on string matching algorithm, and protocol analysis based on hardware. The software-only parsing methods use the string lookup and comparison functions in the operating system, which have ver...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
Inventor 倪宏李军陈君李明哲
Owner ZHENGZHOU SEANET TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap