基于双重特征的协议识别方法

The Methods of Protocol Identification Based on Double Characteristic

随着Internet技术的发展,网络应用服务越来越丰富多彩。为了对目前互联网中的流量实施有效监控,需要使用协议识别技术,因此,协议识别方法已成为研究热点。然而随着网络协议的复杂化,一些传统的协议识别方法已经不能够准确地识别协议。主要介绍基于数据包Payload特征的识别方法与基于流量特征的SVM识别方法,并提出一种将两者结合的协议识别方案。

With the development of Internet, there are more and more Jnternet application. In order to take effective way to monitor the flow rate of Internet, the identification technology of protocol is required, so the methods of protocol identification become research hotspot. But with the complexity of Internet protocol , some traditional methods of protocol can＇ t identify the protocol correctly . This thesis proposes the method of protocol identification based on the data package＇ s Payload and the method of identification based on the flow rate＇ s SVM, it proposes a new method to identify protocol with the combination of that two methods last.