摘要
P2P软件在网络中应用广泛,如何快速有效地识别P2P数据流成为十分重要的问题。传统的P2P识别方法对当前P2P动态端口以及内容加密无能为力。文章根据P2P流包括IP包数目、UDP比例以及连接数指标等动态行为特征,结合数据挖掘分类算法,提出了一种基于距离判决函数的判决算法,并对该算法进行实验验证。实验证明这种算法能对数据流进行高效的判决和预测。通过该方法,对网络中用户使用P2P软件可以进行有效的快速识别,达到对P2P监控的目的。
P2P software is widely used in networks.It is a very important issue that how to identify P2P data flows fast and effectively.The traditional P2P identification methods are not suitable to widely applied dynamic port and the content encryption.Combining with data mining classification,this paper proposes a new decision algorithm based on distance decision function according to the dynamic characteristics of P2P flows,including IP packets numbers,percent of UDP and link-numbers.The experiment results show that P2P data flows can be identified and predicated quickly and effectively using this algorithm,therefore P2P flows can be monitored.
出处
《信息与电子工程》
2011年第1期117-120,共4页
information and electronic engineering
基金
国家"863"计划项目(2007AA01Z151)
关键词
对等网络
流量识别
动态特征
Peer to Peer
flow identification
dynamic characteristics
