A Network Data Analysis Method Based on Application Layer Data
A technology of network data analysis and network data, applied in the field of network data analysis based on application layer data, can solve problems such as high failure rate, mixed analysis results, error-prone, etc., and achieve the effect of reducing the failure rate
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Examples
Embodiment 1
[0024] Filter out the application layer: Through Next Generation Firewalls, NGFW captures and reads network data, uses the identification engine to load and analyze the current data packet information, and judges whether the application layer data packet is included. If it is an application layer data packet, use the identification engine to load and analyze it Output the application layer data of each application layer data packet; analyze the application layer: use NextGeneration Firewalls, NGFW to filter the selected application layer data, get the application layer data that meets the requirements, or display the application layer data that meets the requirements in a specific color , to highlight the application layer data that meets the requirements; cluster analysis: perform cluster analysis on the selected application layer data, extract application layer data features and character string features, and then perform cluster analysis, and cluster each As a kind of applic...
Embodiment 2
[0026] In embodiment one, add following operation:
[0027] In step 1, the capture and reading process is to identify each data flow of the backbone, entrance and exit of the network, or the convergence point of the data flow, and analyze the data of the application layer, so that enough data can be read to ensure the integrity of the data .
[0028] Filter out the application layer: Through Next Generation Firewalls, NGFW captures and reads network data, uses the identification engine to load and analyze the current data packet information, and judges whether the application layer data packet is included. If it is an application layer data packet, use the identification engine to load and analyze it Output the application layer data of each application layer data packet; analyze the application layer: use NextGeneration Firewalls, NGFW to filter the selected application layer data, get the application layer data that meets the requirements, or display the application layer da...
Embodiment 3
[0030] In embodiment two, add following operation:
[0031] In step 1, the data packet information is analyzed and judged, the data packets of the network layer and the transport layer are eliminated, and redundant data is eliminated, so as to facilitate the operation in the next step.
[0032]Filter out the application layer: Capture and read network data through Next Generation Firewalls and NGFW, use the recognition engine to load and parse the current data packet information, and determine whether it contains application layer data packets. If it is an application layer data packet, use the recognition engine to load and parse it Output the application layer data of each application layer data packet; parse the application layer: use NextGeneration Firewalls, NGFW filters the selected application layer data to obtain the application layer data that meets the requirements, or displays the application layer data that meets the requirements as a specific color , highlight the...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More