TPCAD:a text-oriented multi-protocol inference approach

ZHAO Yong1; YAO Qiu-lin1; ZHANG Zhi-bin1; GUO Li1; FANG Bin-xing1

您当前的位置：

首页 >

文章列表页 >

TPCAD:a text-oriented multi-protocol inference approach

更新时间：2024-10-14

- TPCAD:a text-oriented multi-protocol inference approach
- Vol. 30, Issue S1, Pages: 28-35(2009)
- 作者机构：
  
  1. 中国科学院计算技术研究所
  2. 中国科学院研究生院
  3. 信息内容安全技术国家工程实验室
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP393.08
- Published：2009
- 稿件说明：
移动端阅览
[1]赵咏,姚秋林,张志斌,郭莉,方滨兴.TPCAD:一种文本类多协议特征自动发现方法[J].通信学报,2009,30(S1):28-35.

ZHAO Yong1, YAO Qiu-lin1, ZHANG Zhi-bin1, et al. TPCAD:a text-oriented multi-protocol inference approach[J]. 2009, 30(S1): 28-35.
[1]赵咏,姚秋林,张志斌,郭莉,方滨兴.TPCAD:一种文本类多协议特征自动发现方法[J].通信学报,2009,30(S1):28-35. DOI：

ZHAO Yong1, YAO Qiu-lin1, ZHANG Zhi-bin1, et al. TPCAD:a text-oriented multi-protocol inference approach[J]. 2009, 30(S1): 28-35. DOI：

摘要

流量分类在深度包检测等网络信息安全领域具有广泛应用

而协议特征的发现是流量分类中的一个重要问题。基于文本类协议的特点提出了一种准确、高效的多协议特征自动提取方法。利用网络流量中文本内容的语义特点

将流量解析成语义单位

提出了一个在语义空间上的相似性比较方法

并据此对文本类的流量进行聚类。然后合并同一类的网络流量并提取出同类流量所共有的特征。实验表明

该方法对常见文本类协议拥有超过95%的准确率

并可以实现对流量的在线学习和分类。

Abstract

Protocol inference

which discovers protocol characteristics automatically

is an important problem in traffic classification.An accurate and efficient inference method based on semantic analysis of text traffic was proposed.According to the semantic analysis

the text content of traffic to token sequences was resolved.Then the token sequences based on a similarity comparison criterion on semantic space was clustered.At last the recognition characteristics was extracted from the token sequences that belong to the same protocol.In the experiment

the precision ratio is above 95% for common protocols and the speed can meet the needs of online training and classification.

关键词

Keywords

references

Views

880

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Fine-grained recognition method for encrypted FTP commands based on temporal dual-mode feature fusion

Research on network malicious traffic classification based on parallel branch joint coding

Adaptive clustering federated learning via similarity acceleration

Communication framework for directed transmission of informative semantic

Survey of application of machine learning in wireless channel modeling

Related Author

Jin Shuyuan

Li Yongfei

Guo Yuanbo

Yang Zhi

Fu Chunhui

ZHANG Ningning

YANG Tianyu

CUI Mengzhen

Related Institution

School of Computer Science and Engineering, Sun Yat-sen University

School of Cyberspace Security, Hainan University

School of Cryptography, Information Engineering University

Ningxia Internet Emergency Center Ningxia Branch

Ningxia Key Laboratory of Artificial Intelligence and Information Security for Channeling Computing Resources from the East to the West

AI问答

⁰