可扩展的应用协议识别与解析软件的设计与实现

Design and Implementation of Extensible Application Protocol Recognition and Analysis Software

在总结现有应用协议识别方法的基础上,面向中小型网络流量监管需求,提出可扩展的应用协议识别与解析框架。通过分层流量筛选与解析策略和基于插件的可扩展功能管理、基于树的协议解析插件等技术,尝试在灵活性和可扩展性方面对应用协议识别与解析给出可行的解决方案。设计并实现了在线用户上网行为解析系统,高效筛选和识别常用的社交应用流量,提取用户上网账号,还原用户上网行为,实验结果验证了该方法的有效性。

Based on the current APIA method and the need of small-medium network traffic limita- tion, this paper proposes the expandable framework of APIA, in which it uses layered traitit screen- ing and analysis strategy. Based on the technologies of plugin＇ s expandable function management and tree protocol analysis plugin, it aims to provide teasible solution tor the APIA in terms of flexi- bility and expandability. This paper designs and completes the analytical system on Internet users＇ net behaviors, which can efficiently screen and identify the traitit of commonly-used social applica- tions, extract Internet account of the user and reproduce net behaviors. The effectiveness of the method in this paper has been verified through experiments.