Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

A Method for Accurately Identifying the Characteristics of Cross-Message Protocols

A protocol feature and message feature technology, applied in the field of data processing, can solve the problems of inaccurate port identification results, low identification accuracy, and inability to pass ports, etc., and achieve flexible feature library configuration, accurate identification, and efficient identification. Effect

Active Publication Date: 2022-05-24
南京安讯科技有限责任公司
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Port identification is one method, but with the rapid growth of network application types, it is unrealistic for each network application to monopolize a port, which results in extremely inaccurate port identification results, and even some network applications use non-fixed ports , it is not recognized by the port at all
Therefore, there is a method of identifying protocols through message characteristics, but if the characteristics are very short, the recognition accuracy is very low, and the relationship between different messages can also be regarded as features, and even some protocols can only be identified through a group of messages. For example, at the specific offset of the first message data, specify the length of the second message, so that this feature can only be recognized when both messages are received, so this paper proposes a cross-message identification Protocol signature method for identifying various complex signatures present in multiple packets

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A Method for Accurately Identifying the Characteristics of Cross-Message Protocols
  • A Method for Accurately Identifying the Characteristics of Cross-Message Protocols

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0040] The present invention is further described in detail below in conjunction with the reaction route and specific embodiments.

[0041] as Figure 1As shown, a method of accurately identifying the characteristics of the cross-message protocol, comprising the following steps: receiving a new message, first of all, to determine whether matched_list the traversal is over or not, according to the judgment result of the judgment result is matched_list the end of the traversal, then take a matched_feature, And determine whether the identified packet-feature does not belong to crosshead-list and the new message can be used as its starting condition to identify the message, and then follow-up processing according to the judgment result; as the judgment result of the second step is to meet the conditions, then identify the referred packet-feature, and the identification result processing; as the judgment result of the second step is not satisfied, it is necessary to determine the matche...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention relates to a method for accurately identifying the characteristics of a cross-message protocol. A set of corresponding processing flow design is made when the matched_list is not traversed at the end; Corresponding processing, and finally output the final identification conclusion for the different matching states of the processing results. After the processing of the above multiple steps, the protocol features of cross-messages are finally accurately identified. The invention can provide a method for accurately identifying features of a cross-message protocol with good recognition accuracy, fast recognition speed, flexible configuration of a feature database, and simple expansion.

Description

Technical field [0001] The present invention relates to the field of data processing techniques, in particular to a method of accurately identifying features of the cross-message protocol. Background [0002] Nowadays, people's work and learning are more and more inseparable from the network, the data in the network is more and more valuable, there have been various types of network intermediate equipment, network traffic analysis and statistics, and ultimately for network users to provide more convenience or protection. [0003] For TCP traffic, the target of the analysis is the application data it carries, and the premise of the analysis is to identify the corresponding protocol of the application layer. Port identification is a method, but with the rapid growth of network application types, it is unrealistic for each network application to occupy a port exclusively, which causes the result of port identification to be extremely inaccurate, and even some network applications us...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L69/22H04L69/06
CPCY02D30/50
Inventor 陈稳
Owner 南京安讯科技有限责任公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products