A target service identification method in vpn environment
A target service and identification method technology, applied in the field of network traffic classification, can solve problems such as loss and achieve high accuracy and practicability
Active Publication Date: 2022-07-12
成都安思科技有限公司
View PDF9 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0002] Virtual Private Network (VPN) technology, as one of the main technologies used to encrypt network traffic, can provide users with protection for secret remote access and other operations by relying on encrypted tunnels and other means; however, under the cover of VPN technology, the traffic transmitted by the network The side channel characteristic information such as packet header information and traffic load of the original traffic is lost, which not only protects user privacy, but also brings convenience for illegal personnel to access illegal services, and brings new challenges to network supervision; therefore, For VPN encrypted traffic, how to identify the type of service carried by it has become more and more important
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0028] In order to make the purposes, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only It is a part of the embodiments of the present application, but not all of the embodiments. The components of the embodiments of the present application generally described and illustrated in the drawings herein may be arranged and designed in a variety of different configurations. Accordingly, the following detailed description of the embodiments of the application provided in the accompanying drawings is not intended to limit the scope of the application as claimed, but is merely representative of selected embodiments of the application. Based on the embodiments of the present application, all other embodiments o...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention relates to a method for identifying a target service in a VPN environment, which includes analyzing, calculating and transforming the traffic characteristics of sample traffic accessing a target service in a VPN scenario, and obtaining a sample data feature matching string set feature_s and a sample data packet size Sequence set S, data block data feature string set feature_s' and data block data packet size sequence set D; match the state transition sequences of S and D, and save the relevant feature information of the successfully matched data block data; take out the state transition sequence For the successfully matched data block feature set, analyze and calculate feature_s' and feature_s to obtain the t value of the number of edit distances, and evaluate the feature matching degree. The present invention can identify whether a specific target service has been accessed therein based on the analysis of the traffic encapsulated by the VPN, and algorithm matching with the mastered VPN traffic library.
Description
technical field [0001] The invention relates to the field of network traffic classification, in particular to a target service identification method in a VPN environment. Background technique [0002] As one of the main technologies used to encrypt network traffic, virtual private network (VPN) technology can provide users with the protection of secret remote access and other operations by means of encrypted tunnels; however, under the cover of VPN technology, the network traffic Loss of side-channel feature information such as packet header information and traffic load of the original traffic protects user privacy, but also brings convenience for illegal personnel to access illegal services and brings new challenges to network supervision; therefore, For VPN encrypted traffic, how to identify the type of service it carries has become increasingly important. SUMMARY OF THE INVENTION [0003] The purpose of the present invention is to overcome the shortcomings of the prior...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L47/2441H04L12/46
CPCH04L47/2441H04L12/4641Y02D30/50
Inventor 胥雄牟一林代先勇邓金祥
Owner 成都安思科技有限公司