Unlock instant, AI-driven research and patent intelligence for your innovation.

A method and device for optimizing dpi device protocol rule base and rule samples

An optimization method and rule technology, applied in the field of network communication, can solve the problem of increasing the number of samples, reduce rule redundancy and sample redundancy, and improve recognition performance

Active Publication Date: 2020-12-22
WUHAN GREENET INFORMATION SERVICE
View PDF4 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] However, on the one hand, due to the increase of new application protocols, application version upgrades and application changes, in order to meet the identification function of application traffic, the number of rules needs to be continuously increased, and the number of samples is also continuously increasing

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A method and device for optimizing dpi device protocol rule base and rule samples
  • A method and device for optimizing dpi device protocol rule base and rule samples
  • A method and device for optimizing dpi device protocol rule base and rule samples

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0051] The embodiment of the present invention provides a DPI device protocol rule library and a method for optimizing rule samples, such as figure 1 As shown, it specifically includes the following steps:

[0052] Step 10, after collecting the hit status of the device rules deployed in various places, divide the hit degree of each device rule according to the hit status, and put the device rules whose hit degree does not meet the preset requirements into a pre-deleted state to meet the preset requirements. The required device rules are put into the pre-release rule base.

[0053] This step is mainly to "collect and classify the hit situation of each device rule, and label each device rule with a degree". It should be noted that based on the existing protocol identification rule base, the hit situation of device rules deployed in various places (ie, each device node) is collected and summarized, and then the hit degree of all device rules is uniformly divided. by figure 2 ...

Embodiment 2

[0083] On the basis of the optimization method for the DPI equipment protocol rule library and rule samples provided in the above-mentioned embodiment 1, the present invention also provides a DPI equipment protocol rule library and an optimization device for rule samples that can be used to implement the above method, such as Figure 5 Shown is a schematic diagram of the device architecture of the embodiment of the present invention. The apparatus for optimizing the DPI device protocol rule base and rule samples in this embodiment includes one or more processors 21 and memory 22 . in, Figure 5 A processor 21 is taken as an example.

[0084] The processor 21 and the memory 22 may be connected via a bus or in other ways, Figure 5 Take connection via bus as an example.

[0085] The memory 22 is used as a non-volatile computer-readable storage medium for optimizing the DPI device protocol rule library and rule samples, and can be used to store non-volatile software programs, ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides a method and a device for optimizing DPI equipment protocol rule base and rule sample, and the method comprises the steps: collecting equipment rule hit conditions of all places, dividing the hit degrees of all rules, entering a pre-deletion state if the requirements are not met, and putting the rules meeting the requirements into a pre-release rule base; judging whether theequipment rule entering the pre-deletion state fails or not based on the periodic hit condition of the laboratory rule, and if not, putting the equipment rule into a pre-release rule base; performinga performance loss test on each equipment rule in the pre-published rule base, and modifying or deleting the rules which do not reach the test standard; and testing each rule sample in the pre-published rule base, and if the test is qualified, publishing the corresponding equipment rules and samples. According to the method, the protocol rule base and the samples are optimized in combination withthe rule hit condition of the equipment rule base, the rule period hit condition of the laboratory and the rule performance loss degree, rule redundancy and sample redundancy in the rule base are reduced, and the recognition performance is improved.

Description

【Technical field】 [0001] The invention relates to the technical field of network communication, in particular to a DPI equipment protocol rule library and an optimization method and device for rule samples. 【Background technique】 [0002] DPI equipment refers to the capability of business data flow identification and business data flow control, works from the OSI model transmission layer to the application layer, has high data processing capabilities, can identify and manage traffic carried by the network, and can be deployed on the network backbone layer, metropolitan area network, and network equipment within the enterprise. Traditional DPI devices usually identify application traffic based on regular expressions, and usually extract data packets corresponding to device rules as rule samples. [0003] However, on the one hand, due to the increase of new application protocols, application version upgrades and application changes, in order to meet the identification functio...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): G06F16/215G06F16/28G06F16/2458
CPCG06F16/215G06F16/2462G06F16/285
Inventor 熊威黄华桥程波王赟李明栋曾伟
Owner WUHAN GREENET INFORMATION SERVICE