Method, system and storage medium for http traffic analysis and processing oriented to dpi applications

A traffic analysis, HTTP protocol technology, applied in the field of network security, can solve problems such as code instability, achieve the effect of improving overall performance, saving system overhead, and stabilizing the protocol analysis process

Active Publication Date: 2022-05-31
INST OF INFORMATION ENG CHINESE ACAD OF SCI
View PDF12 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Such a processing method will face a problem: every time a new analysis requirement is added, it is necessary to adjust the analysis process of the HTTP protocol and add corresponding processing branches, making the protocol analysis code unstable due to changes in business requirements

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method, system and storage medium for http traffic analysis and processing oriented to dpi applications

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0024] In order to make the technical solutions of the present invention more obvious and easy to understand, specific embodiments are given and described in detail below with reference to the accompanying drawings.

[0025] The flow chart of the method of the present invention is as follows figure 1 As shown, it mainly includes two basic steps of service registration HTTP field and HTTP field parsing and callback, and the details are as follows.

[0026] (1) Business registration HTTP field steps

[0027] Different services have different requirements for HTTP protocol fields. The HTTP field required by a certain service is called the service's interest domain for the HTTP parsing result. The business layer writes its own interest domain in the configuration file, and the parsing layer obtains the interest domain of different services through the configuration file. This process is the registration process of the business interest domain.

[0028] In addition, during the re...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method, system and storage medium for analyzing and processing HTTP traffic oriented to DPI applications, which belongs to the field of network security and is divided into an analysis layer and a business layer. At the same time, mark the callback mode from the analysis layer to the business layer, and then send the configuration file to the analysis layer for business registration; the analysis layer analyzes the HTTP traffic according to the HTTP protocol standard according to the HTTP fields of interest to each business in the configuration file, When a field of the HTTP protocol is completely parsed, check whether the business layer has a business registration and callback mode, and call back the corresponding business to the business layer according to the callback mode. The present invention adopts the design idea of ​​layering HTTP protocol analysis and HTTP service analysis, and realizes analysis and processing of HTTP traffic through flexible field registration methods and different callback modes.

Description

technical field [0001] The invention designs a method, a system and a storage medium for HTTP traffic analysis and processing applied to a deep packet inspection (Deep Packet Inspection, DPI) system, and belongs to the field of network security. Background technique [0002] Through the identification and analysis of network traffic, the DPI system provides the basis for traffic analysis, network planning, user behavior analysis and other services, and realizes refined management of network service applications. As the most widely used network protocol on the Internet, HyperText Transfer Protocol (HyperText Transfer Protocol, HTTP) is the key foundation of the DPI system to analyze and process HTTP traffic. [0003] Most of the existing HTTP traffic analysis integrates HTTP protocol analysis and HTTP traffic analysis, that is, each time an HTTP field content (such as a URL) is parsed, corresponding business analysis processing is performed. Such a processing method will fac...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): H04L9/40H04L67/02H04L67/30H04L67/60H04L69/22
CPCH04L63/1408H04L63/16H04L67/02H04L67/30H04L69/22H04L67/60Y02D30/50
Inventor 李舒刘庆云杨威周舟张宏飞刘洋李钊杨嵘
Owner INST OF INFORMATION ENG CHINESE ACAD OF SCI
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap