应用层协议识别技术研究
Research on the Application Layer Protocol Identification Technology
彭文峰 1杜中军1
作者信息
- 1. 四川大学计算机学院，成都 610065
- 折叠
摘要
应用层协议识别作为当前网络测量管理与网络安全研究领域的热点问题，其相关技术研究对整个互联网的可管理性、安全性和规范性具有重要的理论意义和应用价值。重点介绍基于端口映射、基于有效载荷特征、基于流动态行为特征、基于主机行为等几种主要的协议识别方法，总结分析它们的工作原理和优缺点，并对进一步研究学习方向提出建议。
Abstract
As the current network measurement management and hot issues in the field of network security research, the related technology research on application layer protocol identification has important theoretical significance to the entire Internet manageability, security, and nor-mative. Mainly introduces several layer protocol identification methods based on the port mapping, payload characteristic and flow dy-namic behavior characteristics, and based on the host behavior identification. Analyzes and summarizes the working principle and advan-tages, proposes the suggestions for the further research.
关键词
协议识别/端口映射/有效载荷特征/流动态行为特征/主机行为Key words
Protocol Identification/Port Mapping/Payload Characteristic/Flow Dynamic Behavior Characteristics/Host Behavior引用本文复制引用
出版年
2015
NETL
NSTL
维普
万方数据