Unlock instant, AI-driven research and patent intelligence for your innovation.

Network protocol characteristic matching method based on index clustering

A feature matching and network protocol technology, applied in data exchange networks, digital transmission systems, electrical components, etc., can solve problems such as complex association relationships and high rule matching overhead.

Active Publication Date: 2016-04-20
NAT UNIV OF DEFENSE TECH
View PDF3 Cites 5 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] The present invention aims to provide a network protocol feature matching method based on index clustering to solve the technical problem that the existing protocol identification method based on message depth inspection has a complex relationship between the load feature and the protocol identification rule, which leads to high rule matching overhead. Optimize the relationship between design load feature items and protocol identification rules to improve rule matching performance

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Network protocol characteristic matching method based on index clustering
  • Network protocol characteristic matching method based on index clustering
  • Network protocol characteristic matching method based on index clustering

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0156] Embodiments of the present invention will be described in detail below in conjunction with examples.

[0157] The first step is the preprocessing stage.

[0158] The input protocol identification rule R is shown in Table 1, which contains a total of 6 rules (i.e. N=6). For the convenience of description, it is stipulated that a rule contains at most 2 load characteristics (i.e. M=2), and an index element can be associated at most For one rule (ie L=1), the maximum length of the message data payload is 32 bytes (ie P=32).

[0159] Table 1 Protocol identification rule R

[0160]

[0161] Table 2 Deep packet inspection string set D

[0162] Numbering

string

1

aaa

2

bbbb

3

cccc

[0163] Step 1.1 establishes a deep packet inspection index cluster. After the execution is completed, the deep message inspection character string set D (as shown in Table 2), the load feature mapping table S[N][M] (N=6, M=2, as shown in ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a network protocol characteristic matching method based on index clustering and aims at optimally designing an incidence relation between load characteristics and protocol identification rules in order to improve rule matching performance. The method comprises a first step of preprocessing: inputting a protocol identification rule set and establishing a deep packet inspection index clustering and a fixed position index clustering; a second step of deep packet inspection: inspecting whether the packet load of a network packet includes a string in a string set in a traversal way by using a current dominant deep packet matching engine and outputting a hit result; and a third step of matching the rules: reconstructing the hit result returned by a deep packet inspecting engine in virtue of a deep packet inspection index clustering table, matching the rule of deep packet inspection characteristic string index clustering, and matching the rule of the fixed position index clustering. Compared with a conventional protocol identification method based on packet deep inspection, the network protocol characteristic matching method obviously decreases the number of matching times of the protocol rule and improves the performance of protocol identification.

Description

technical field [0001] The invention relates to a network protocol identification method in the computer field, in particular to a network protocol feature matching method. Background technique [0002] Protocol identification is a key supporting technology for network bandwidth management and security protection. The existing protocol identification methods can be roughly divided into three types: protocol identification methods based on port matching, protocol identification methods based on deep packet inspection, and protocol identification methods based on data flow characteristics. Among them, the protocol identification method based on deep packet inspection is an extension of the protocol identification method based on port matching. In addition to analyzing the header information, it also matches the characteristics of the packet data load. In comparison, this type of method has a fast identification speed. , easy to update, high accuracy and other advantages, has ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/26H04L29/06
CPCH04L43/18H04L69/22
Inventor 孙一品陈曙晖庞立会王飞钟求喜张博锋刘宇靖闫晓明
Owner NAT UNIV OF DEFENSE TECH