Network flow identification method, device and equipment and computer storage medium

Abstract

The invention discloses a network traffic identification method, device and equipment and a computer storage medium, and the method comprises the following steps: collecting and labeling network traffic in different graph modes; preprocessing the acquired network traffic, and extracting feature information of each network session; generating a data flow diagram based on the feature information; training a graph neural network by utilizing the data of the data flow graph to generate a network flow identification model; converting unknown flow into data of a data flow graph and inputting the data into the network flow identification model, wherein the network flow identification model matches the data flow graph of the unknown flow with a graph mode learned by the network flow identificationmodel; and when the matching degree is greater than a preset threshold, judging a graph mode corresponding to the unknown flow, thereby determining a network application corresponding to the unknownflow. According to the invention, the problem of low accuracy of network traffic identification is solved, and the graph pattern of the network traffic and the corresponding network application are judged by using the graph neural network.

Description

technical field [0001] The invention relates to the technical field of computer networks, in particular to a method for identifying network traffic. Background technique [0002] Traffic identification is an important technology required by network operators. It helps operators and network managers to reasonably schedule network bandwidth resources, guarantee user QoE, improve network management level, and improve network service quality. With the rapid development of the Internet and online services, traffic identification is becoming more and more important. [0003] Traditional traffic identification methods are mainly based on port detection. However, with the development of network technology, more and more network protocols use random port numbers for communication. At this time, another method is proposed, which is deep packet inspection technology (DPI). However, the disadvantage of this method is that it can only identify known protocols, and it takes a lot of man...

AI Technical Summary

Problems solved by technology

[0006] In view of this, a network traffic identification method is provided to solve the problem of low correct rate of network traffic identification, realize the data structure of synthesizing network data flow into a data flow graph, and use the network traffic identification model to determine network traffic and corresponding network applications

Images