Patent
Method and system for network protocol recognition based on tri-classifier cooperative training learning
Zhang Yongzheng,Yu Zhou,Wang Yipeng,Tao Xu +3 more
- 07 Jan 2015
11
TL;DR: In this article, a tri-classifier cooperative training learning method was proposed for network protocol recognition. But the method is limited to a few identified samples and is not suitable for large networks.
read more
Abstract: The invention relates to a method and a system for network protocol recognition based on tri-classifier cooperative training learning. The method comprises the following steps: carrying out IP (Internet Protocol) regrouping and TCP (Transmission Control Protocol) traffic reduction on network original traffic, and stipulating the unit of network data from original packets to flow; extracting each message of unidirectional flow feature information and vectoring to build a feature matrix; building a tri-classifier cooperative training classifier with few identified samples; judging whether a classifying model of an analyzed protocol exists or not, and utilizing a tri-classifier cooperative training learning method to build a protocol classifier if the classifying model does not exist, otherwise, judging the protocol attributes of data packets; training by a tri-classifier cooperative training learning algorithm based on J48 and obtaining the classifying model of the analyzed protocol; carrying out protocol type judgment on network data packets not identified, and outputting two classes of results: one class refers to the network data packets belonging to the target protocol, and the other class refers to network data packets not belonging to the target protocol. High recognition accuracy and high recalling rate are ensured by the method.
read more
Chat with Paper
AI Agents for this Paper
Find similar papers on Google Scholar, PubMed and Arxiv
Write a critical review of this paper
Analyze citations of this paper to find unaddressed research gaps
Citations
Patent
Method and system for constructing App feature code database
Wang Guangshan,Li Wei +1 more
- 17 Jul 2018
TL;DR: In this article, a method for constructing an App feature code database is presented, which comprises analyzing the protocols of respective data packets of an apk file; extracting a preset key protocolfield; generating respective feature code rules corresponding to the App from the extracted key protocol field by using a predefined second rule.
1
Patent
Business identification method based on SDN architecture
Pan Chengsheng,Yang Li,Wei Debin,Shi Huaifeng,Liu Yong +4 more
- 28 Aug 2018
TL;DR: In this article, a business identification method based on the SDN architecture was proposed for online flow classification, and a sample difference measurement mode is proposed for existence of a large number of noise problems, samples with the higher confidence are selected for training classification to achieve the noise filtering function.
1
Patent
Method and system for automatic online identification of network traffic patterns
Alexander Alexeevich Serov,Valery Nikolaevitch Glukhov,Zhang Hongbo +2 more
- 09 Oct 2015
TL;DR: In this paper, a method for automatic online identification of network traffic patterns is proposed, where the self-learning-based classification is performed in an online mode by computing a statistical model of the input traffic stream (102) on the basis of a pre-defined set of features and storing the statistical model in a data base which is configured to store results of a plurality of selflearning based classifications.
1
Patent
Adaptive multi-protocol adaptation method
Min Yanan,Qian Bo +1 more
- 12 Oct 2018
TL;DR: In this article, an adaptive multi-protocol adaptation method was proposed, where protocol data are collected by using two methods of receiving client data by using TCP server service and adding a custom protocol, the custom protocol is directly stored, after KNN training is performed on the data collected by the TCP server, prediction classification can be obtained, and subdivision subclasses can beobtained by subdivision for storage.
Patent
Method for learning and migrating communication protocol in multi-agent cooperation scene
Tan Zheyue,Yin Jianwei,Shang Yongheng,Zhang Luming,Li Ying,Deng Shuiguang +5 more
- 19 May 2020
TL;DR: In this article, a method for learning and migrating a communication protocol in a multi-agent cooperation scene is presented, which comprises the steps of enabling each execution agent to independently observe an environment, employing a neural network to code the environment, and generating an information feature vector needing to be shared with other agents.
References
Patent
Anomaly detection for packet-based networks
Madalina Baltatu,Paolo Abeni +1 more
- 31 Dec 2008
TL;DR: In this paper, an anomaly detection method for a packet-based network which includes several network resources, also called network-related software objects, is presented, which includes monitoring the network resources of the packetbased network, ordering the monitored network resources according to a given ordering criterion, and detecting an anomaly in the packet based network based on the ordered network resources.
31
Patent
Unknown network protocol identification method and system
Yun Xiaochun,Zhang Yongzheng,Yipeng Wang,Yu Zhou +3 more
- 11 Sep 2013
TL;DR: In this article, the authors proposed an unknown network protocol identification method based on active learning using a support vector machine oriented active learning method for learning the characteristic vector data set to obtain a classifier aiming at a to-be tested network protocol; and thirdly, using the obtained classifier to discriminate protocol attributes of to be-identified network data packets.
16
Patent
Semi-supervised clustering integrated protocol identification system
Hongjun Wang,Jianhuai Qi +1 more
- 04 Jul 2012
TL;DR: In this article, a semi-supervised clustering integrated protocol identification method is proposed, which comprises the following steps: various data packets in a network are acquired; received network data is analyzed, and each field of the data packets is extracted and counted; feature code of network data obtained after the network data was analyzed is matched with various feature codes preset in a data base, if the match is successful, the data packet are corresponding protocols; data not successfully matched is subject to cluster analysis, a plurality of base clustering devices are used to cluster the data data packets, and
15
Patent
WEB tunnel detection method based on protocol behavior analysis
Huang Liusheng,Fei Wang,Yang Wei,Chen Zhili +3 more
- 04 Jun 2014
TL;DR: In this article, a web tunnel detection method based on protocol behavior analysis is proposed. But the detection method has higher detection efficiency compared with the network tunnel detection technique in the prior art, under the same data constraints.
8