Intelligent deep analysis system and analysis method

Abstract

The invention discloses an intelligent deep analysis system. The system comprises a message analysis module, a deep message analysis module, an application feature library management module, a neuralnetwork deep recognition module and an application information output module; the message analysis module analyzes received data and analyzes that a load of a data packet is a plaintext or a ciphertext; when it is analyzed that the load of the data packet is the plaintext, the deep message analysis module reads an application feature library from the application feature library management module,conducts a deep analysis on the load of the data packet, and obtains application layer information; and when it is analyzed that the load of the data packet is the ciphertext, the neural network deeprecognition module recognizes and analyzes the load of the data packet by employing a neural network algorithm, and encapsulates and outputs message information and features of the analyzed data. According to the system, the feature library and neural network capability coefficients are transplanted from the conventional online intelligent deep analysis system, and the recognition capability of new network access devices is improved.

Description

technical field [0001] The invention belongs to the technical field of communication networks, and in particular relates to an intelligent in-depth analysis system and analysis method. Background technique [0002] The in-depth analysis device is a system that performs in-depth analysis of different network application layer loads based on its feature library and outputs its content and user traffic behavior. It plays a very important role in the field of network security. [0003] With the rapid development of Internet technology and the continuous increase and change of network applications, the feature library of in-depth analysis equipment must also be continuously updated and upgraded in order to cope with the ever-changing application layer data and user behavior; in addition, with the development of Internet security, more and more More and more application data is encrypted and transmitted, and the extraction of feature information is becoming increasingly difficult,...

AI Technical Summary

Problems solved by technology

[0003] With the rapid development of Internet technology and the continuous increase and change of network applications, the feature library of in-depth analysis equipment must also be continuously updated and upgraded in order to cope with the ever-changing application layer data and user behavior; in addition, with the development of Internet security, more and more More and more application data is encrypted and transmitted, and the extraction of feature information is becoming increasingly difficult, which makes the existing deep analysis equipment face the problem of high maintenance cost of feature database and the problem that the traditional feature database upgrade mode cannot cope with the increasing proportion of encrypted application data.

Images