加密流量识别方法、装置、电子设备和存储介质

By combining sliding window detection with multiple randomness detection algorithms and the split-half expansion algorithm, the problem of low accuracy in identifying explicit and implicit fields in encrypted bitstream data is solved, achieving more efficient network protocol parsing.

CN117792675BActive Publication Date: 2026-07-17INSTITUTE OF INFORMATION ENGINEERING CHINESE ACADEMY OF SCIENCES

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
INSTITUTE OF INFORMATION ENGINEERING CHINESE ACADEMY OF SCIENCES
Filing Date
2023-11-15
Publication Date
2026-07-17

AI Technical Summary

Technical Problem

In existing technologies, the accuracy of identifying the explicit and implicit fields of encrypted bitstream data is low, resulting in low accuracy in parsing unknown network protocols.

Method used

The algorithm employs a sliding window-based detection process, using multiple randomness detection algorithms to perform randomness detection on the bitstream data. The detection results determine the locations of the dense-to-light boundary and the light-to-dense boundary, and the binary expansion algorithm is combined to accurately identify the light-to-dense field.

Benefits of technology

This improves the accuracy of identifying explicit and implicit fields in encrypted bitstream data, providing more accurate basic data for subsequent network protocol analysis and enhancing the accuracy of network protocol parsing.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN117792675B_ABST
    Figure CN117792675B_ABST
Patent Text Reader

Abstract

本发明涉及网络安全技术领域,提供一种加密流量识别方法、装置、电子设备和存储介质,其中方法包括:获取待识别的加密比特流数据;从比特流数据的首位开始,对比特流数据进行边滑窗边检测处理,检测处理包括采用多种随机性检测算法对各窗口中的比特流数据进行随机性检测,得到各窗口的检测结果;基于预设数量个连续窗口的检测结果,确定比特流数据中的密明交界位置和明密交界位置,直至滑窗到比特流数据的末位;基于密明交界位置和明密交界位置,对比特流数据的明密字段进行识别。本发明提供的加密流量识别方法、装置、电子设备和存储介质,能够提高明密字段识别准确性。
Need to check novelty before this filing date? Find Prior Art