通信学报

• 技术报告 • 上一篇    下一篇

自适应网络应用特征发现方法

王变琴1,2，余顺争1   

  1. 1. 中山大学 信息科学与技术学院，广东 广州510006；2. 中山大学 教学实验中心，广东 广州510006
  • 出版日期:2013-04-25 发布日期:2013-04-15
  • 基金资助:
    国家高技术研究发展计划（“863”计划）基金资助项目（2007AA01Z449）；国家自然科学基金?广东联合基金重点项目资助（U0735002）；国家自然科学基金资助项目（60970146）

Adaptive extraction method of network application signatures

  • Online:2013-04-25 Published:2013-04-15
  • Supported by:
    The National High Technology Research and Development Program of China (863 Program) (2007AA01Z449); The Key Program of National Natural Science Foundation of China-Guangdong Joint Funds (U0735002); The National Natural Science Foundation of China (60970146)

被引次数

15

摘要： 提出一种应用特征的自动提取方法。该方法首先从应用层载荷中提取关键词序列，然后通过负例子集合和冗余处理生成候选特征集，最后通过基于识别率的自适应机制选择应用特征。实验结果表明，该方法提取的应用特征能精确识别不同的协议。

Abstract: An adaptive application signature extraction method (AdapSig) was proposed. AdapSig firstly extracted keyword sequences from payloads of packets, and then negative examples and redundancy filter were used to generate candidate signatures. An adaptive mechanism based on self-identification rate was applied to select the final signature. Experimental results show that application signatures extracted by AdapSig have high accuracy for various protocols.

No Suggested Reading articles found!