Application layer protocol analysis method and device
A technology of application layer protocol and analysis method, which is applied in the field of application layer protocol analysis method and device, can solve the problem that the decoding solution cannot support web applications and non-web applications at the same time, reduce maintenance costs and decoding development cycles, and improve general The effect of sex and scalability
Active Publication Date: 2019-09-20
BEIJING TOPSEC NETWORK SECURITY TECH +2
View PDF3 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0005] An application layer protocol analysis method and device provided by the present invention are used to solve the problem that the prior art decoding solution cannot support web applications and non-web applications at the same time
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0056] The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.
[0057]The application layer protocol analysis method and device provided by the present invention provide a unified abstract description of the decoding process of the application layer, and pre-save it in the form of transaction processing rules. When decoding, the specified transaction processing rules are obtained according to different application layer protocols Decode the message. The invention separates the realization of the decoding process from the l...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses an application layer protocol analysis method and device. The method comprises the steps as follows: affair handling rules, an input field relation table and an output field relation table are pre-configured in a configuration analysis module, wherein the affair handling rules comprise HTTP, TCP and UDP according to the affair type; a field mapping module maps externally input fields into internal fields required for decoding according to the input field relation table; an affair distribution module distributes the internal fields to an affair handling module according to the affair type of the internal fields; the affair handling module acquires the corresponding affair handling rules of the internal fields according to the type of the internal fields and analyzes output fields corresponding to the internal fields according to the affair handling rules; an affair output module acquires predefined fields mapped by the output fields according to the output field relation table and outputs the predefined fields. The realization of the decoding processing is separated from logic description, and the universality and extensibility of an application decoding engine are greatly improved.
Description
technical field [0001] The invention relates to the technical field of the Internet, in particular to an application layer protocol analysis method and device. Background technique [0002] As the core function of modern firewalls, routing devices and many other network security products, network protocol decoding is mainly used in personal information protection and enterprise network security. Its business involves network forensics analysis, intrusion detection and defense, data filtering and leakage prevention, user behavior auditing and monitoring, network fault analysis, etc. [0003] In recent years, with the expansion of the scale of the Internet and the rapid increase in the number of network applications, for upper-level applications such as websites, emails, chat software, Weibo social networking, and file transfers, they all follow one or more protocol specifications to communicate with remote servers. For data interaction. Each application's protocol decoding ...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L29/08
Inventor 张首斌唐通
Owner BEIJING TOPSEC NETWORK SECURITY TECH