基于多级模板分析的空间传输协议识别算法

Space transport protocol identification algorithm based on multi-level template analysis

针对卫星系统的数据截获过程中得到数据多为比特流形式,原有的各种基于完整数据报文的协议识别方法不能很好地识别这类数据。通过距离判别算法和模板分析思想的结合,提出了一种新的基于多级模板分析的空间传输协议识别算法,并经实验进行了验证。根据空间协议特征构建一级模板,利用一级模板间距离建立二级模板,然后基于距离判断算法进行模板分析,实现协议识别。实验结果表明:多级模板分析可提高空间协议识别效率,该方法可为协议识别技术研究提供新的思路。

The data intercepted by the satellite system is bit stream format, which is not identified by the current identification methods based on the integrity of data packets. With the combination of the distance judge algorithm and template analysis, a new space transportation protocol identification algorithm based on multilevel template analysis was proposed and verified through experiments. The first-level template can be buih by space protocol characteristics and then the second-level template can be built based on the distances between the first-level templates. The distance judge algorithm was used to make the template analysis and realize protocol identification. The experimental results demonstrate that multi-level template analysis can improve the efficiency of space protocol identification and the proposed method can provide new ideas for the research of protocol identification techniques.