资源描述:
《基于有限自动机和特征码的协议识别方法分析》由会员上传分享,免费在线阅读,更多相关内容在工程资料-天天文库。
1、AbstractWiththedevelopmentofInternettechnologytheneedfornetworkprotocolidentificationisgrowing.Manyindustriesneedtoclassifythenetworktra伍caccordingtothetypeofprotocolthatuseruses.Ontheotherhand,theaccuracyoftheidentificationofnetworkprotocolisalsorelatedtothesecu
2、rityofthesystemnetwork.Traditionalsignature-basedprotocolidentificationmethodsidentifiedinthecourseoftheagreement,somemethodsonlyjudgewhetheracertainpacketinonenetworkconnectioncontainingaparticularsignatureornot,andsomeothermethodsmatchseveralpacketswhichhavebee
3、ncached・Theseidentificationmethodsind瓏rentoccasionshavedrawbacks-Themodelofprotocolidentification,whichcombinesfiniteautomataandsignature,canrecordthestatusoftheidentificationprocess-Thismethodofprotocolidentificationisusedtodescribesomestatesandtheirconversionrel
4、ationshipintheprocessofprotocolcommunication,byfinitestateautomaton,andregardsthesignatureofprotocolastheinputsymbolinthecurrentstateinfiniteautomaton,matchingthecapturedpackets.Somenetworkpacketsinaprotocol,whichcanoftenbeveryeasytoget,areverysmallamountofdatasig
5、natures.Butitisgenerallynotsufficienttodeterminetheprotocolbyasinglesmallfragmentsignaturebecauseofsmallamountofdata・Accordingtothemultiplicationprinc/le,asmallamountofdataonthesejointsignatureanalysis,cangreatlyinprovethecredibilitydeterminationofaprotocol.Howeve
6、r,theautomatonthatconstructedmayberedundantinstate.Inordertoreducetheredundantstates,analgorithmforoptimizationisproposed.Thecombinationoftheidentificationwithautomatonandsignatureandnetfilterframeworkachievesazero-copy,zero-cacheeflScientnetworktrafficmanagements
7、ystemTheidentificationofcombiningfiniteautomataandsignatureusesasmallamountofdatasignature,reducingthedifficultyinfilteringandchoosingsignatures,andyoucanzero-cachedmatchsignaturesonmorethanonenetwork.Itisveiyinportantfornetworksecuritywiththehelpofnetfilterframew
8、ork,providingahigh-speednetworklinkprotocolidentificationandlmnitoringenvironment.Keywords:finiteautomata,signature,protocolstate,connectionmultiplexing