Network service identification method and device

Abstract

The embodiment of the invention provides a network service identification method and device. The method comprises the following steps: inputting the feature data of a service data flow into a trainedlong-short-term memory network model, and outputting a service type label corresponding to the service data flow, the long-short-term memory network model being obtained by training based on the feature data of the sample data flow and a predetermined service type label of the sample data flow; and obtaining the service type of the service data flow according to the service type label output by the long-short-term memory network model. The LSTM network model is obtained by training based on the feature data of the sample data flow and the predetermined data flow type label, so that the LSTM network model has characteristic long-term memory and short-term memory, and can fully consider the characteristics of each data packet in the data stream in time dimension and space dimension, and accordingly the identification of the service type of the data stream is more accurate.

Description

technical field [0001] The embodiments of the present invention relate to the Internet field, and in particular to a method and device for identifying network services. Background technique [0002] With the rapid development of the Internet, there are more and more types of applications carrying services on the network, so the work of network supervision and service identification is becoming more and more complicated. For network operators, efficient and mature network service identification technology is conducive to the smooth progress of traffic billing and resource optimization. The early network service identification method is based on the port identification method, which is identified by detecting the port number of each interactive IP protocol in the communication network, but in the case of dynamic allocation of ports and for encrypted data packets, it cannot be identified. . [0003] Currently, the most widely used network service identification method is a me...

AI Technical Summary

Problems solved by technology

[0004] Existing network service identification methods need to be realized through artificially defined global characteristic values, such as statistical characteristics such as the total number of packets of the data flow, the average upstream packet size, the average downstream packet size, the total delay, and the delay between adjacent packets. To identify the type of business data flow, without considering the relationship between data packets in the data flow, the extracted features lack the overall characteristics of the data flow and the context information between data packets, and the recognition result is inevitable. Not accurate enough

Images