Feature fuzzy P2P protocol identification method based on connection statistics rule analysis
A technology for protocol identification and regularity, applied in transmission systems, digital transmission systems, data exchange networks, etc., can solve problems such as ineffectiveness, poor recognition rate, and low detection efficiency, so as to avoid loss, facilitate identification and detection, and improve identification The effect of accuracy
Active Publication Date: 2020-06-19
厦门美域中央信息科技有限公司
View PDF7 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
There are two main methods for traditional protocol identification: one is based on the technology of scanning message content for identification, which has a high accuracy rate, but it does not work for encrypted links and applications without keyword features
Another identification method is the identification based on the data model of statistical message information. This method has high identification efficiency, but its identification rate is poor.
In the existing technology, the detection efficiency of which protocol is used for traffic is low, and there are still many places to be improved
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0025] In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in combination with specific embodiments and with reference to the accompanying drawings. It should be understood that these descriptions are exemplary only, and are not intended to limit the scope of the present invention. Also, in the following description, descriptions of well-known structures and techniques are omitted to avoid unnecessarily obscuring the concept of the present invention.
[0026] Such as figure 1 As shown, a kind of feature fuzzy P2P protocol identification method based on connection statistical law analysis proposed by the present invention includes;
[0027] S1. Statistically record relevant data about common P2P protocols;
[0028] S2. Extracting various characteristic elements about the P2P protocol from the recorded relevant data, and establishing a P2P protocol characteristic databa...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses a feature fuzzy P2P protocol identification method based on connection statistical law analysis. The method comprises the following steps: S1, counting and recording related data about a common P2P protocol; S2, extracting various feature elements related to the P2P protocol in the recorded related data, and establishing a P2P protocol feature database; S3, analyzing and calculating the frequency of occurrence of various feature elements related to the P2P protocol in the P2P protocol feature database according to a connection statistics rule, calculating the probability of occurrence of various element features, and performing sorting and grading according to the probability; S4, monitoring the flow of the application host, and extracting to-be-detected flow characteristic elements; S5, in the P2P protocol feature database, matching and comparing the P2P protocol feature elements with the feature elements of the to-be-detected flow according to the descending order of the occurrence probabilities of the P2P protocol feature elements; S6, determining the type of the protocol adopted by the to-be-detected flow. According to the method, the rule of high feature occurrence probability is analyzed by counting the P2P protocol feature data, so that the protocol type identification efficiency is improved.
Description
technical field [0001] The invention relates to the technical field of computer network security, in particular to a characteristic fuzzy P2P protocol identification method based on connection statistical law analysis. Background technique [0002] Statistical law, the law that acts on the whole of a large number of accidental events, expresses the essence and inevitable connection of these things as a whole. Probability is the basic concept of statistical law theory, which reflects the essential characteristics of random processes, and characterizes the possibility of a random event, that is, the frequency of occurrence of the event in multiple repetitions of the process. Protocol identification refers to the identification of the protocol type used by the traffic transmitted on the network link. There are two main methods for traditional protocol identification: one is based on the technology of scanning message content for identification. This identification method has h...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/26H04L29/06H04L12/24H04L29/08
CPCH04L41/142H04L43/18H04L67/104H04L69/22
Inventor 石小川刘琦黄龙飞张晶刘家祥赵昆杨陈瑜靓
Owner 厦门美域中央信息科技有限公司