加密网络流量类型识别研究  

Research of encrypted network traffic type identification

作　　者：李尧[1,2,3] 郝文[3] 

机构地区：[1]内江师范学院计算机科学学院,四川内江641110 [2]内江师范学院网络应用项目开发重点实验室,四川内江641110 [3]国家信息安全工程技术研究中心,北京100093

出　　处：《计算机应用》2009年第6期1662-1664,共3页journal of Computer Applications

基　　金：四川省应用基础重点项目(07JY29-124);四川省教育厅重点项目(2006A145)

摘　　要：针对传统的检测方法无法识别加密网络流量类型的问题,对加密网络流量类型的识别进行了研究。从加密后保持不变的网络流量特征着手,提出了通过统计数据包长度、数据包到达时间间隔以及流的方向等方法可以正确地识别加密网络流量类型,最后设计出加密网络流量类型识别的模型和相应的加密网络流量实时识别方案,通过对该方案的验证表明采用该方案能够获得较好的效果。Concerning the problem that the encrypted network traffic type cannot be identified using traditional inspection way, this paper studied its identification methods. Since the network traffic remains intact after being encrypted, the network traffic type could be identified correctly by calculating data packet size, timing and direction, etc. Finally, the identification model of the encrypted network traffic type and the corresponding real-time identification project were also designed. The result of the verification of the project shows that using the project can achieve good effect.

关 键 词：数据包 网络流量 特征 识别 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]