Information detection method and information detection device

Abstract

Embodiments of the invention disclose an information detection method and an information detection device, and relate to the technical field of Internet. The method comprises the following steps: determining the starting detection position of a data block to be detected according to an offset set in an adjacent difference detection characteristic; from the starting detection position, sequentially detecting whether the difference values corresponding to a target number of positions in the data block to be detected correspondingly match differentiated characteristic values set in the adjacent difference detection characteristic, wherein the difference value corresponding to any position in the target number of positions is the difference value between the numerical value of a position calculated by calculating the order based on a preset difference value and the numerical value of a position next to the position, and the target number is equal to the number of the differentiated characteristic values set in the adjacent difference detection characteristic; judging that the data block to be detected matches the adjacent difference detection characteristic if all the difference values correspondingly match the differentiated characteristic values set in the adjacent difference detection characteristic; and judging that the data block to be detected does not match the adjacent difference detection characteristic if not all the difference values correspondingly match the differentiated characteristic values set in the adjacent difference detection characteristic. By implementing the scheme provided by the embodiments of the invention, the characteristic scale is reduced.

Description

technical field [0001] The present application relates to the field of Internet technologies, and in particular to an information detection method and device. Background technique [0002] With the popularization of computers and networks, information technology is changing and affecting human life style. Various network applications emerge in endlessly, and security threats and network abuse are also increasing day by day. Therefore, in practical applications, it is necessary to detect network traffic so that network regulators can identify, classify, and control various network traffic. [0003] In the prior art, when network traffic is detected, a DPI (Deep Packet Inspection, Deep Packet Inspection) technology based on traffic characteristics is usually used for detection. [0004] Although the above technologies can be accurately detected in practical applications, once attacked, for example, the attacker changes the network traffic through encryption or static transfor...

AI Technical Summary

Problems solved by technology

[0004] Although the above technologies can be accurately detected in practical applications, once attacked, for example, the attacker changes the network traffic through encryption or static transformation to avoid detection. In order to ensure accurate information detection, it is necessary to add various transformed features. , it can be seen that the above information detection method relies on specific features to detect successfully, and the required feature scale is large

Images