Unlock instant, AI-driven research and patent intelligence for your innovation.

Method for automatically extracting and checking features of application program

An application program and automatic extraction technology, applied in digital transmission systems, electrical components, transmission systems, etc., can solve the problems of no two-way feature matching of data packets, no targeted comparative analysis of traffic packets, etc.

Active Publication Date: 2020-10-27
SICHUAN UNIV
View PDF7 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

These methods basically analyze all the traffic data generated by the target application, but do not conduct targeted comparative analysis of traffic packets with specific behaviors, nor do two-way feature matching based on the characteristics of uplink and downlink data packets.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method for automatically extracting and checking features of application program
  • Method for automatically extracting and checking features of application program
  • Method for automatically extracting and checking features of application program

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0021] The invention analyzes and extracts the traffic characteristics displayed by the application program under specific operation, and is mainly aimed at the Ethernet data packets of the computer network. Before each analysis, it is necessary to manually collect a certain amount of traffic generated by the same operation of the target application on different devices and under different accounts. In order to further illustrate the specific implementation of the present invention, it will be described in detail in conjunction with the accompanying drawings. The present invention proposes a method for automatically extracting and verifying the characteristics of an application program, which can automatically extract the characteristics of the upstream and downstream data packets of the specific behavior of the target application program, so that the target application program can be identified through the characteristics.

[0022] Such as figure 1 As shown, the overall proc...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a method for automatically extracting and checking features of an application program, and relates to the technical field of computer network flow analysis. The method comprises the steps of 1) collecting flow generated by the same operation of a target application program under the login of multiple devices and different accounts; 2) carrying out stream grouping on the data packets, and only storing a first stream generated by each operation; 3) separating uplink and downlink data packets of the stream, and sequencing the data packets in each direction; 4) merging thesame serial number packets in the same-direction data together for character string comparative analysis to obtain two-way character string features, and 5) setting matching rules in combination withthe two-way character string features to check the effectiveness and false alarm rate of the features. The method can be used for identifying the application programs with the obvious communication features in the specific behaviors.

Description

technical field [0001] The invention relates to the technical field of computer network flow analysis. Background technique [0002] With the rapid development of computer technology, the degree of informatization is getting higher and higher, and the number of applications is increasing rapidly. The data packets generated by some applications under certain operations will carry some fixed strings. The main basis for this conclusion is as follows: 1) There are differences in the implementation logic of different applications, which may lead to some obvious characteristics in the communication process; 2) Different applications will add some additional interactive behaviors according to business needs ; 3) Most applications use independently developed private protocols at the application layer, which have unique protocol features; 4) Even applications that use encrypted communication may exchange some special information during the handshake process between the client and th...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/24H04L12/26
CPCH04L41/14H04L43/08
Inventor 刘亮梁登高郑荣锋
Owner SICHUAN UNIV