Unlock instant, AI-driven research and patent intelligence for your innovation.

A configurable protocol analysis method and system

A protocol analysis and protocol data technology, applied in transmission systems, electrical components, etc., can solve problems such as low efficiency and complex analysis structure, and achieve the effect of saving hardware resources and fast processing speed

Active Publication Date: 2021-10-01
PLA STRATEGIC SUPPORT FORCE INFORMATION ENG UNIV PLA SSF IEU
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0009] Aiming at the problem that the existing protocol analysis method has relatively complex analysis framework and low efficiency, the present invention proposes a configurable protocol analysis method and system

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A configurable protocol analysis method and system
  • A configurable protocol analysis method and system
  • A configurable protocol analysis method and system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0046] like figure 1 As shown, a configurable protocol parsing method, including:

[0047] Step S101: Buffering the overall protocol data, specifically, maintaining the input timing;

[0048] Step S102: Extract the header information from the protocol data. When extracting for the first time, define the format of the descriptor (metaframe). The descriptor (metaframe) is used for the transmission of subsequent intermediate information and the generation of final information, and extract the comparison instruction and Offset pointer; the intermediate information includes loopback indication, comparison indication and offset pointer; loopback indication is used to indicate whether looping is required, and data packets are encapsulated by multi-layer protocols, because each layer of protocol analysis is a Each layer of protocol analysis is performed once; the offset pointer is used to extract the packet type data of the header; the comparison instruction is used to decide whether...

Embodiment 2

[0069] like figure 2 As shown, a configurable protocol parsing system includes message cache module, entry management module, key value generation module, CAM module, message pre-parsing module, intermediate information and final information update module, semantic analysis and processing module ;

[0070] The message cache module is used to cache the overall protocol data;

[0071] The entry management module is used to extract the header information from the protocol data. When extracting for the first time, define the format of the descriptor. The descriptor is used for the transmission of subsequent intermediate information and the generation of final information, and extracts the comparison indication and partial information from the descriptor. shift pointer; the intermediate information includes loopback indication, comparison indication and offset pointer; the final information includes header length, payload header length offset pointer, mask pointer, mask length, t...

Embodiment 3

[0078] like image 3 As shown, another configurable protocol analysis system includes: packet cache module, header analysis and extraction module, programmable slice module, entry management module and semantic analysis and processing module.

[0079] The message cache module is responsible for caching message data;

[0080] The entry management module is responsible for providing data for the update of intermediate information and final information;

[0081] The header parsing and extraction module is mainly responsible for header parsing and extraction for further parsing of Slice;

[0082] The programmable Slice module mainly extracts the corresponding information according to the established header data extraction method, and then further extracts characteristic information such as message decomposition and redundant information removal to provide support for the next message processing;

[0083] The semantic analysis and processing module is mainly responsible for cutti...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention belongs to the technical field of protocol analysis and processing, and discloses a configurable protocol analysis method and system. The method includes: caching protocol data; header analysis and extraction, key value generation, CAM exact matching, table item search, intermediate information and final Information update, semantic analysis and processing; the system includes: message cache module, header analysis and extraction module, key value generation module, CAM module, entry management module, intermediate information and final information update module, semantic analysis and processing module. The present invention can customize the type of supported protocol analysis by customizing the configuration of CAM and table item data, and the processing speed is fast, and the protocol analysis is resolved through loopback, saving additional hardware resources. For the analysis platform, the present invention only needs to configure the corresponding CAM and RAM according to the agreed data format.

Description

technical field [0001] The invention belongs to the technical field of protocol analysis and processing, and in particular relates to a configurable protocol analysis method and system. Background technique [0002] With the development of network security technology, mimic defense technology has gradually become a popular security technology. Mimic defense requires the system to have dynamic heterogeneous redundancy, that is, dynamically schedule heterogeneous executives, and judge the security status of the system through the output of mimic judgment heterogeneous execution (Wu Jiangxing. Research on cyberspace mimic defense[J]. Journal of Information Security, 2016, 1(4):1-10.). At present, there are many mimic defense technologies applied in the field of switching and routing. Many technologies use heterogeneous protocol stacks, heterogeneous operating systems, and heterogeneous processors to construct mimic systems, and introduce mimic judgments to judge the output of ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06
CPCH04L69/22
Inventor 张文建刘勤让吕平沈剑良宋克李沛杰刘冬培陈艇赵博汤先拓
Owner PLA STRATEGIC SUPPORT FORCE INFORMATION ENG UNIV PLA SSF IEU