Flow identification method based on network flow gravitation cluster

A traffic identification and network traffic technology, applied in the field of network security management, can solve the problems of low accuracy and fineness of traffic identification, difficulty in identifying unknown traffic and encrypted traffic, etc., and achieve the effect of accurate classification and identification ability

Inactive Publication Date: 2013-07-10
NANJING UNIV OF POSTS & TELECOMM
View PDF4 Cites 36 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0018]Technical problem: the purpose of this invention is to provide a network traffic business type identification method, by optimizing the local optimal solution of the clustering algorithm, mainly to solve the traffic identification accuracy And the granularity is not high, it is difficult to identify unknown traffic and encrypted traffic problems

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Flow identification method based on network flow gravitation cluster
  • Flow identification method based on network flow gravitation cluster
  • Flow identification method based on network flow gravitation cluster

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0113] according to Figure 7 In the scene diagram, there are 23 sample streams, numbered from 1, 2, ..., 23, belonging to two different business types 1 and 2, P is the network flow to be identified, and there are 37 original characteristic attributes of the network flow , expressed as x 1 , x 2 , ..., x 37 . combine Figure 8 The flowchart of gives the following training process and recognition process:

[0114] 1. Training process:

[0115] 1) Count the value of each network flow on the original feature attribute attribute to form a flow training set:

[0116]

[0117] in Indicates the normalized value of the i-th sample stream on the j-th attribute, then the sample stream X i form the covariance matrix and converted to Form, U is the eigenvector u of the covariance matrix C 1 , u 2 , ..., u 37 The eigenvector matrix formed by is the eigenvalue of the covariance matrix C The eigenvalue matrix constituted, so that the eigenvalues ​​satisfy > ...>...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a flow identification method based on network flow gravitation cluster. The method comprises a training stage and an identification stage. The training stage comprises the steps of selecting network flow characteristic attributes, and forming flow training sets after normalization processing is conducted on each network flow; selecting isolation flows by a Z fraction, and isolating the flows; conducting iteration classified-learning on each network flow in the training sets by using semi-supervised learning network flow gravitation cluster principles and methods in all non-isolated flow sets; and at last, finishing classification of the isolation flows and forming a flow classification model. The identification stage comprises the steps of forming a network flow sequence to be identified; conducting flow gravitation classification on each network flow to be identified in network flows, mapping each network flow to specific network traffic business types through a flow cluster and finishing identification to the network flows. According to the flow identification method based on the network flow gravitation cluster, unknown and encrypted flows can be identified, and the locally optimal solution problem of cluster identification is solved, and identification accuracy is improved.

Description

technical field [0001] The invention is a traffic identification method based on network flow gravitational clustering, which is mainly used to solve the problems of low efficiency, poor real-time performance, low accuracy and fineness existing in the current network traffic identification method, and belongs to network security management field. [0002] Background technique [0003] One of the current development trends of network security management is to provide differentiated services and provide different quality of service guarantees, and the premise is to correctly and effectively identify various types of business applications in network traffic. Excellent service identification technology can not only greatly improve the ability of network management, but also predict unknown network traffic to a certain extent. Traffic identification can be used in various modules such as network measurement, network management, content audit, public opinion monitoring, and serv...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/891H04L47/41
Inventor 张登银廖建飞万明祥王雪梅程春玲
Owner NANJING UNIV OF POSTS & TELECOMM
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products