A method to improve the accuracy of protocol analysis when database connection information is lost

Abstract

The invention relates to a method for improving the protocol parsing accuracy in case of the database connection information loss. The method comprises the steps that A, a data packet is obtained; B, the data packet when a connection is established is parsed, which includes the steps that B1, a connection packet is parsed: a client end initiates a connection request to a database service when the client end carries out a database operation, a bypass audit device obtains the connection request data packet from the client end initiated through step A, and parses the data packet to obtain the connection information; B2, the connection information is analyzed: after the client end and the database service establish the connection successfully, the communication between the client end and the database service is carried out in the connection request data packet; C, the data packet with established connection is parsed: parsing is conducted on the data packet with established connection based on complete client end connection information. According to the method for improving the protocol parsing accuracy in case of the database connection information loss, the lost connection information when the database connection information is lost can be accurately and efficiently complemented, and the parsing accuracy of the data packet through the audit device is improved.

Description

technical field [0001] The invention belongs to the technical field of digital information transmission, such as telegram communication, and particularly relates to a method for improving protocol analysis accuracy when database connection information is lost in the field of network information security. Background technique [0002] In computer network technology, network database technology realizes data and resource sharing. Therefore, in Internet applications, network database technology is widely used. [0003] Network database refers to the introduction of database technology into the computer system, and the timely release of a large amount of information stored in the database with the help of network technology. The biggest advantage of using a network database is that users can complete common operations on database data through client tools, Web browsers or client applications, and users can complete various complex data services only through simple interface ope...

AI Technical Summary

Problems solved by technology

The protocol analysis technology is generally used in the solution of network database security protection. The connection information from the client and the database plays a very important role in the protocol analysis, such as the encoding used, the size of the integer, etc. But in practical applications, there will always be some sessions where the database connection information is lost. Without this information, the accuracy of the analysis will drop by about 60%

Images