The invention provides a non-deep
traffic analysis streaming matching search
analysis method, which comprises the following steps of: constructing a deep data
packet detection architecture on the basis of a
data platform development kit (DPDK); aiming at the non-encrypted traffic, establishing a multi-mode recognition mechanism combining a
regular expression and a feature bit
stream mode; aiming at the encrypted traffic, constructing an encrypted traffic feature
library according to the statistical features, the protocol features and the behavior features; real-time
risk detection of network traffic is realized by adopting a streaming matching search technology; and constructing an
intelligent decision and response mechanism, and integrating flow analysis and identification results. According to the non-deep
traffic analysis streaming matching search
analysis method provided by the invention, real-time analysis,
risk identification and supervision of network non-encrypted traffic and encrypted traffic are realized by taking a
data platform development kit (DPDK) as a basis and combining a high-performance streaming
regular expression engine and a finite-state
machine principle; the method can be widely applied to scenes of
network communication supervision,
data security protection, malicious traffic monitoring and the like.