Protocol keyword identification method based on lexicographic tree pruning search

A recognition method and keyword technology, applied in the field of keyword recognition, can solve problems such as affecting the accuracy of analysis and occupying large storage space, and achieve the effects of good use value, improved efficiency, and improved space utilization efficiency.

Active Publication Date: 2017-05-24
CHINA ACADEMY OF SPACE TECHNOLOGY
View PDF3 Cites 11 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0012] The technical problem solved by the present invention is: to overcome the deficiencies of the prior art, to provide a protocol keyword recognition method based on dictionary tree pruning search, and to solve the existing problems caused by using traditiona...

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Protocol keyword identification method based on lexicographic tree pruning search
  • Protocol keyword identification method based on lexicographic tree pruning search
  • Protocol keyword identification method based on lexicographic tree pruning search

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0032]Aiming at the deficiencies of the prior art, the present invention provides a method for identifying protocol keywords based on dictionary tree pruning search, which solves the problem of excessive storage space occupation and problems caused by using traditional dictionary trees to mine protocol keywords. The problem that the fixed length of the protocol feature word affects the accuracy of the analysis can improve the efficiency and applicability of the protocol keyword recognition, such as figure 1 It is a principle flowchart of a protocol keyword recognition method based on dictionary tree pruning search of the present invention, and the method of the present invention includes the following steps:

[0033] (1) Obtain the data stream that needs to be identified by the protocol keyword, establish a circular queue buffer with a length of 24, position the iterator index at the first position of the data stream, establish the variable DataCount to record the length of the...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a protocol keyword identification method based on lexicographic tree pruning search. The method comprises: firstly acquiring a to-be-identified data flow, saving data of the data flow into a circular queue buffer, screening character strings in the buffer, and generating branches of a lexicographic tree; in each lexicographic tree branch generation process, computing a pruning threshold of each node when pruning conditions are met, pruning the lexicographic tree, and finally acquiring a purify rate; and according to the purify rate, obtaining keywords, thereby completing keyword identification. According to the protocol keyword identification method based on the lexicographic tree pruning search, by importing a lexicographic tree pruning algorithm, a defect that the used storage space is oversize when protocol keyword identification is performed by using the traditional lexicographic tree algorithm is solved, and an advantage of improving the space utilization efficiency is achieved; and the use value is better.

Description

technical field [0001] The invention relates to a keyword recognition technology, in particular to a protocol keyword recognition method based on dictionary tree pruning search. Background technique [0002] Protocol reverse engineering refers to extracting protocol syntax, semantics, and workflow by monitoring and analyzing information such as network input and output, system behavior, and instruction execution flow of protocol entities without relying on protocol descriptions. Protocol reverse is divided into format reverse and state machine reverse. In format reverse engineering, identifying and extracting keywords in the protocol is a basic and important task. The keyword of the protocol refers to the information that plays a key role in the control of the communication stipulated by the protocol specification in the protocol transmission unit, that is, the message, and generally appears frequently in the communication data flow. There are mainly the following methods ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06G06F17/30
CPCG06F16/9027G06F16/90344H04L69/02H04L69/06H04L69/12
Inventor 衣龙腾齐维孔周钠李明刘晓晖
Owner CHINA ACADEMY OF SPACE TECHNOLOGY
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products