Network behavior detecting method and device

A detection method and detection device technology, applied in data exchange networks, digital transmission systems, electrical components, etc., can solve the problems of high hardware cost, high time and space complexity, long development cycle, etc. The effect of feature matching efficiency and low algorithm complexity

Active Publication Date: 2016-11-23
四川无声信息技术有限公司
View PDF4 Cites 8 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The former detection method has high hardware cost and long development cycle, which is not conducive to secondary development and expansion. The latter dete...

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Network behavior detecting method and device
  • Network behavior detecting method and device
  • Network behavior detecting method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0016] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. The components of the embodiments of the invention generally described and illustrated in the figures herein may be arranged and designed in a variety of different configurations.

[0017] It should be noted that like numerals and letters denote similar items in the following figures, therefore, once an item is defined in one figure, it does not require further definition and explanation in subsequent figures.

[0018] Accordingly, the following detailed description of the embodiments of the invention provided in the accompanying drawings is not inten...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a network behavior detecting method and device and belongs to the field of network auditing. The method and device is characterized in that a plurality of buffer areas are arranged through the collecting buffer area transverse expansion technology, high-speed data collecting under a 10 gigabit network environment is achieved, a network communication behavior feature knowledge database is built on the basis of a tree-like logic model, a finite automata is built and determined according to four vocabulary trees, respectively corresponding to a data link layer, a network layer, a transmission layer and an application layer, obtained after the analysis of the network communication behavior feature knowledge database so as to improve a multi-mode matching algorithm AC-BM, and fast matching of network communication behavior features is achieved. Compared with traditional data packet detecting and data auditing technologies, the network behavior detecting method and device is high in feature matching efficiency, low in algorithm complexity, reasonable in knowledge database design and beneficial to upgrading and expansion.

Description

technical field [0001] The invention relates to the field of network auditing, in particular to a network behavior detection method and device. Background technique [0002] With the development of network technology, various new network applications emerge in an endless stream. At the same time, the rapid expansion of the network scale has increased the network bandwidth. Identifying network applications and network communication behaviors in high-speed networks has become a new requirement in the field of network auditing. At present, the detection methods commonly used in the industry are to complete high-speed network data capture and network communication behavior analysis through dedicated hardware equipment, or to use the traditional "message feature" matching method to sequentially match the features in the rule feature library. The former detection method has high hardware cost and long development cycle, which is not conducive to secondary development and expansio...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L12/24
CPCH04L41/147
Inventor 黄勇周安民崔凯铜欧晓聪彭华
Owner 四川无声信息技术有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products