A network traffic classification method capable of identifying unknown traffic and terminal equipment
A technology of network traffic and classification method, applied in the field of network traffic classification method and terminal equipment, can solve the problem of lack of new traffic identification ability of unknown category, self-renewal ability, etc., and achieve the effect of high classification accuracy
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0039] Such as figure 1 As shown, the method of the present invention mainly includes two aspects. The first one is to design a threshold judgment method based on information entropy to solve the problem of identifying unknown types of traffic. The idea of this algorithm is: after each traffic passes through the network traffic classification model, the entropy of the output vector of the softmax layer will be calculated. If the entropy is less than the threshold, it will be regarded as an unknown category traffic, and the threshold will continue to update itself over time; the second It is to design a dynamic adaptive algorithm based on balance loss, and add the ability to dynamically adapt to the latest network traffic for the network traffic classification model. In the data of each known category, several original traffic samples are selected as examples of this category, and the example set of each category is continuously updated based on the recent example mean method...
Embodiment 2
[0073] Such as Figure 5 As shown, a schematic diagram of a terminal device for identifying unknown traffic and classifying network traffic provided by an embodiment of the present invention. The terminal device for identifying unknown traffic and classifying network traffic in this embodiment includes: a processor, a memory, and a computer program stored in the memory and operable on the processor, such as a threshold judgment program based on information entropy. When the processor executes the computer program, the steps in the above-mentioned embodiments of the network traffic classification method for identifying unknown traffic are implemented, for example figure 2 Steps S1-S3 are shown. Alternatively, when the processor executes the computer program, it realizes the functions of the modules / units in the above-mentioned device embodiments, for example, a threshold judgment function based on information entropy.
[0074] Exemplarily, the computer program may be divided...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More 


