An information detection method and device

A technology of information detection and location detection, which is applied in the Internet field, can solve the problem of large scale and achieve the effect of reducing the scale of features

Active Publication Date: 2021-02-12
NEW H3C TECH CO LTD
View PDF6 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] Although the above-mentioned technologies can be used for accurate detection in practical applications, once attacked, for example, when the attacker changes the characteristic value by performing XOR operation on the characteristic, since the value range of a byte is 0-255, 256 types are required. Only direct features can complete information detection. Therefore, when applying the above method for information detection, the required feature scale is relatively large.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • An information detection method and device
  • An information detection method and device
  • An information detection method and device

Examples

Experimental program
Comparison scheme
Effect test

example 1

[0080]Example 1: Suppose that the characteristic samples are: 9, 5, 2, 7, 8, 4, 8, 3, and the parity of each byte in the characteristic sample is determined according to the result of the numerical value modulo 2. The result is 0, which means an even number. The result If it is 1, it means an odd number, with 0 as an even number and 1 as an odd number. The forward characteristic value and reverse characteristic value of the characteristic sample are shown in Table 4 below.

[0081]Table 4

[0082] Feature sample 95278483 Modulo 2 result 11010001 Positive eigenvalue 11010001 Reverse eigenvalue00101110

[0083]From the data shown in Table 4 above, it can be seen that the forward parity sub-features are {1, 1, 0, 1, 0, 0, 0, 1}, and the reverse parity sub-features are {0, 0, 1, 0, 1, 1, 1, 0}, the above-mentioned forward parity feature and reverse parity feature both contain 8 feature values. Since one byte contains 8 bits, the forward parity feature and the reverse parity feature can be sto...

example 2

[0085]Example 2: Assume that the samples to be tested are: 9, 5, 2, 7, 8, 4, 8, 3, and the positive parity sub-features are {1, 1, 0, 1, 0, 0, 0, 1}, The reverse parity sub-features are {0, 0, 1, 0, 1, 1, 1, 0}, the initial detection position is the starting position of the sample to be detected, the preset interval is 1, and the first preset number is 8. The process of testing the sample to be tested is as followsimage 3 As shown in the figure, the judgments on both sides of the sample to be tested are executed at the same time, that is, after the sample to be tested is subjected to a modulo operation, both the left side of the modulus result and the right side of the modulus result must be judged. For any For the judgment on one side, as long as the judgment result is no in the judgment process, the current round of detection on that side will be terminated. In addition, as long as all judgment results on one side of both sides are all yes, the sample to be tested Parity feature m...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The embodiment of the present application discloses an information detection method and device, which relate to the field of Internet technology. The above method includes: determining the initial detection position of the sample to be detected; Detect whether the parity of the first preset number of bytes in the sample matches each parity feature value in the preset parity feature; if all match, determine that the sample to be detected is successfully matched; if not all match, determine the sample to be detected Match failed. Applying the solution provided by the embodiment of the present application for information detection reduces the required feature scale.

Description

Technical field[0001]This application relates to the field of Internet technology, and in particular to an information detection method and device.Background technique[0002]With the popularization of computers and networks, information technology is changing the way of life that affects human beings. Various network applications are emerging one after another, and security threats and network abuse are also increasing day by day. Therefore, network traffic needs to be detected in actual applications so that network supervision agencies can identify, classify, and control various network traffic.[0003]In the prior art, when detecting network traffic, DPI (Deep Packet Inspection, deep packet inspection) technology based on traffic characteristics is usually used for detection.[0004]Although the above techniques can be used to accurately detect in actual applications, once attacked, for example, when an attacker changes the feature value by XORing the feature, since the value range of ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L1/00
CPCH04L1/0063H04L63/1408
Inventor 任方英
Owner NEW H3C TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products