Anomaly detection method and device based on application layer network anomaly message
An application-layer network and abnormal message technology is applied in the field of abnormal detection based on application-layer network abnormal messages. The effect of large acquisitions
Inactive Publication Date: 2018-02-23
HANGZHOU DPTECH TECH
View PDF8 Cites 5 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0002] With the rapid development of the Internet, the form of the application layer message in the network is more changeable. In addition, the abnormal traffic such as structured message in the network appears from time to time. The abnormal detection and analysis of the abnormal network message based on the application layer has produced a lot of problems. big impact
[0003] However, due to the use of traditional anomaly detection and analysis methods, it is often impossible to analyze the complete application layer original message, which increases the difficulty of anomaly detection and analysis based on the application layer network abnormal message
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0021] Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, the same numerals in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with aspects of the present application as recited in the appended claims.
[0022] The terminology used in this application is for the purpose of describing particular embodiments only, and is not intended to limit the application. As used in this application and the appended claims, the singular forms "a", "the", and "the" are intended to include the plural forms as well, unless the context clearly dictates otherwise. It should also be understood that the term...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The application provides an anomaly detection method and device based on an application layer network anomaly message. The method comprises the following steps that: anomaly detection equipment creates shared memory accessible to a user state process in a kernel, wherein the shared memory is used for storing the application layer network anomaly message; a kernel state process stores the acquiredapplication layer network anomaly message which satisfies a preset condition in the shared memory; and the user state process accesses the application layer network anomaly message stored in the shared memory based on a physical address of the shared memory to perform anomaly detection analysis. Through application of the anomaly detection method and device in the embodiment of the invention, theanomaly detection equipment can accurately acquire a complete application layer network anomaly message, thus lowering the difficulty of anomaly detection based on the application layer network anomaly message.
Description
technical field [0001] The present application relates to the field of computer communication, in particular to an abnormality detection method and device based on application layer network abnormality messages. Background technique [0002] With the rapid development of the Internet, the form of the application layer message in the network is more changeable. In addition, the abnormal traffic such as structured message in the network appears from time to time. The abnormal detection and analysis of the abnormal network message based on the application layer has produced a lot of problems. big impact. [0003] However, due to the use of traditional anomaly detection and analysis methods, it is often impossible to analyze the complete application layer original message, which increases the difficulty of anomaly detection and analysis based on the application layer network abnormal message. Contents of the invention [0004] In view of this, the present application provides...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
CPCH04L63/1425
Inventor 朱梁
Owner HANGZHOU DPTECH TECH