Evaluating system and evaluating method for deep packet inspection product

Abstract

The invention relates to an evaluating system and an evaluating method for a deep packet inspection product, belonging to the technical field of computer application, wherein the evaluating system comprises a sample traffic collection module, a deep packet inspection DPI engine module, a DPI business rule configuration module and a DPI product evaluating module. The evaluating method comprises the steps as follows: obtaining pure sample traffic of a mobile internet via the sample traffic collection module; configuring a DPI business recognition rule and appointing the business rule implemented to the sample traffic; inputting the sample traffic into the DPI product evaluating module, and the DPI product evaluating module calling a DPI engine to identify the type of network traffic; counting the output result of the DPI engine under the condition of a specific business rule, and comparing the output result with sample traffic data to obtain a quantitative index. The evaluating system and the evaluating method of the invention can be used for implementing relevant projects of DPI product test evaluation index and providing basis for quantitative scoring of the DPI product.

Description

technical field [0001] The invention relates to an evaluation system and evaluation method for deep packet detection products, belonging to the technical field of computer applications. Background technique [0002] At present, there are many deep packet inspection (DPI) products on the market, but operators still lack objective and specific evaluation methods and systems for the specific performance of these DPI products. quantify it. [0003] DPI identification rules belong to the core competitiveness of DPI system manufacturers. Manufacturers are unwilling to provide complete plaintext DPI rules for free, but only willing to provide identification services, but it is difficult to quantify and verify the accuracy of this service. At the same time, there are serious conflicts between the DPI rule library issued by the group and the rules provided by various manufacturers. All DPI system providers claim that their own rules have a high recognition rate, while rules from oth...

AI Technical Summary

Problems solved by technology

[0002] At present, there are many deep packet inspection (DPI) products on the market, but operators still lack objective and specific evaluation methods and systems for the specific performance of these DPI products. quantify it

[0003] DPI identification rules belong to the core competitiveness of DPI system manufacturers. Manufacturers are unwilling to provide complete plain text DPI rules for free, but only willing to provide identification services, but the service is difficult to quantify and verify the accuracy of

At the same time, there are serious conflicts between the DPI rule library issued by the group and the rules provided by various manufacturers. All DPI system providers claim that their own rules have a high recognition rate, while rules from other sources have a poor recognition rate and are not compatible with rules from other sources. Unable to formulate verification scheme for accuracy

Images