A Method for Analyzing and Identifying Large Bandwidth Private Connections

Abstract

The invention discloses a large bandwidth private connection analysis and identification method, comprising: step 1) establishing daily traffic statistics baselines of various access bandwidth types, and filtering out abnormal users according to the set traffic threshold coefficients of each access bandwidth; 2) Classify and analyze the identified users with abnormal traffic. The same network access devices, similar inner and outer vlan ids, user-side access MAC addresses are similar, and the online and offline times are consistent. Combining the four identification parameters, all Matching or partially matching users are grouped and classified; grouped users are checked according to the matching degree of parameters with different priorities, so as to identify bundled private connection users. The invention can identify single user private connection and multi-user binding private connection.

Description

technical field [0001] The invention relates to a large-bandwidth private connection analysis and identification method based on Radius (broadband user access authentication system) data and DNS (user domain name request data). Background technique [0002] With the speed-up strategy of operators' broadband networks, the bandwidth of home broadband access continues to increase, and incidents of using home broadband bandwidth resources for illegal operations emerge in endlessly, making it impossible to locate network security, and at the same time causing loss of customer resources for operators; bandwidth resale, black operations ( Sell ​​one or more broadband resources to more users), resulting in poor quality of Internet access for end users. The social response is that the operator's network is poor, which affects the operator's brand and reduces customer trust. [0003] Among them, DPI (Deep Packet Inspection Technology) identifies the number of terminals of a broadband ...

AI Technical Summary

Problems solved by technology

[0002] With the speed-up strategy of operators' broadband networks, the bandwidth of home broadband access continues to increase, and incidents of using home broadband bandwidth resources for illegal operations emerge in endlessly, making it impossible to locate network security, and at the same time causing loss of customer resources for operators; bandwidth resale, black operations ( Sell ​​one or more broadband resources to more users), resulting in poor quality of Internet access for end users. The social response is that the operator's network is poor, which affects the operator's brand and reduces customer trust.

[0003] Among them, DPI (Deep Packet Inspection Technology) identifies the number of terminals of a broadband user by monitoring the id sequence of the user's IP protocol layer. There are already cracking technologies and equipment on the network. control;

Images