To-be-detected text recombination method and device of TCP segmented packets

A technology to be detected and sent, which is applied in the computer field, can solve problems such as large memory resources of network devices, increase transmission delay, and reduce transmission efficiency, so as to achieve the effects of saving memory resources, reducing transmission delay, and improving transmission efficiency

Active Publication Date: 2018-06-08
HANGZHOU DPTECH TECH
View PDF7 Cites 2 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Since each TCP segment in the entire data packet needs to be completely reassembled into the text to be detected, it occupies more memory resources of the network device and takes a long time, which increases the transmission delay and reduces the transmission efficiency.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • To-be-detected text recombination method and device of TCP segmented packets
  • To-be-detected text recombination method and device of TCP segmented packets
  • To-be-detected text recombination method and device of TCP segmented packets

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0023] Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, the same numerals in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with aspects of the present application as recited in the appended claims.

[0024] The terminology used in this application is for the purpose of describing particular embodiments only, and is not intended to limit the application. As used in this application and the appended claims, the singular forms "a", "the", and "the" are intended to include the plural forms as well, unless the context clearly dictates otherwise. It should also be understood that the term...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a to-be-detected text recombination method of TCP segmented packets. The method is characterized in that at least one divided TCP segmented packet of the same data is identifiedby corresponding sequential number one by one, and the sequential numbers change progressively according to a division sequence of the TCP segmented packets. The method comprises the steps of determining a length n of data in any received TCP segmented packet; if n is greater than or equal to 2k, dividing a data sequence in any received TCP segmented packet into at least two blocks, wherein the length of the first and the last block of data is k, and k is a data division length determined in advance according to length of an attack characteristic; and according to a progressive change order of the sequential numbers of the received TCP segmented packets, splicing the divided first block of data of any received TCP segmented packet behind the divided final block of data of the previous TCPsegmented packet, so as to recombine to form a to-be-detected text. Through adoption of the method, memory resources of the device are saved, and the transmission efficiency is improved.

Description

technical field [0001] The present application relates to the field of computer technology, in particular to a text recombination method and device for a TCP segment message to be detected. Background technique [0002] As a connection-oriented and reliable transport layer protocol, TCP (Transmission Control Protocol) is widely used in network data transmission. The management of TCP packets and attack detection have also become one of the important tasks of security network devices such as WAF (WebApplication Firewall, Web Application Firewall), IPS (Intrusion Prevention System, Intrusion Prevention System), and anti-virus gateways. Since the offensive content carried in TCP packets transmitted over the network generally has certain characteristics, the pattern matching method is one of the common methods for attack detection on TCP packets. The pattern matching method first extracts the characteristics of the attack content, and then matches the characteristics with the t...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/951H04L29/06H04L47/43
CPCH04L49/9057H04L63/1416
Inventor 孙行鹭
Owner HANGZHOU DPTECH TECH
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products