General extraction method of instant chat protocol elements based on custom label language

Abstract

The invention discloses a custom tag language-based instant chat protocol element universal extraction method. Through a universal platform, an application layer data recombination stage, a message type identification stage, a protocol element extraction stage and a formatting output stage are realized. In the application layer data recombination stage, application layer data is recombined to forma complete data unit for the subsequent stages to perform analysis and extraction; in the message type identification stage, the data unit obtained by recombination in the application layer data recombination stage is subjected to message type identification; in the protocol element extraction stage, according to a message type identified in the message type identification stage, protocol elements are extracted; and in the formatting output stage, the protocol elements extracted in the protocol element extraction stage are subjected to formatting output. According to the method, the development and maintenance workload is greatly reduced; the time is greatly saved; and the influence of field use of customers can be reduced.

Description

technical field [0001] The invention relates to a general extraction method of instant chat protocol elements, in particular to a general extraction method of instant chat protocol elements based on self-defined label language. Background technique [0002] With the development of the Internet, there are more and more instant chat protocols, and the update frequency is getting faster and faster, which brings huge challenges to cyberspace security monitoring. The traditional method of extracting elements of instant chat protocol is to customize a set of codes including application layer data reorganization, message type identification, protocol element extraction and bill output according to the message type and message format of each instant chat protocol, which requires a lot of development and Maintenance workload; each newly supported instant chat protocol needs to be recompiled and restarted, which has a great impact on the customer's on-site use; at the same time, each ...

AI Technical Summary

Problems solved by technology

The traditional method of extracting elements of instant chat protocol is to customize a set of codes including application layer data reorganization, message type identification, protocol element extraction and bill output according to the message type and message format of each instant chat protocol, which requires a lot of development and Maintenance workload; each newly supported instant chat protocol needs to be recompiled and restarted, which has a great impact on the customer's on-site use; at the same time, each instant chat protocol extraction module will also affect each other's stability, affecting the entire Protocol element extraction platform forms a huge impact

The reason is mainly because the traditional instant chat protocol element extraction method is to customize the whole set of codes according to the characteristics of each protocol, and does not abstract the various stages of protocol element extraction into a general processing platform from a macro perspective, and does not abstract the rules of each stage Form a set of custom label language for general processing and platform-based management of instant chat protocol element extraction

Images