A network traffic identification system and method based on dynamic data packet sampling

Abstract

The invention provides a network flow identification system and method based on dynamic data packet sampling. The system comprises a network flow identification server, a data packet analysis module and a behavior analysis module which are successively in unidirectional connection. A traditional network flow identification method can not timely adjust an identification strategy according to continuously changing flow environment, and the conflict is solved in the invention; in a network flow identification process, the system and method of the invention can adjust a current network flow identification strategy through sensing data packet change, and select a first packet information combination protocol identification method, a data packet analysis combination protocol identification method or a network behavior analysis combination protocol identification method; the system and method can automatically select a network flow protocol identification strategy suitable for current flow features according to operation environment change, thereby guaranteeing network flow identification accuracy and treatment efficiency under any flow environment.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a network traffic identification system and method based on dynamic data packet sampling. Background technique [0002] With the rapid development of information technology, especially Internet technology, the number of network applications is also growing rapidly. The development of network applications brings great convenience to people's life, but the complexity and diversity of network applications also brings great challenges to network application management and traffic control. In order to effectively cope with the challenges brought by the rapid development of network applications, real-time and accurate network application identification research has become one of the important research issues in the current network management research field. [0003] Currently existing protocol identification technologies mainly include the following: (1) deep ...

AI Technical Summary

Problems solved by technology

[0012] In order to solve the problem that the existing protocol identification cannot adapt to the ever-changing and unpredictable network traffic in the actual network environment, the present invention provides a network traffic identification system and method based on dynamic data packet sampling, which can sense changes in network traffic characteristics and automatically select Adapt to packet sampling to realize network traffic identification

Images