基于BPSO与神经网络的实时P2P协议识别算法  

A novel real-time p2p identification algorithm based on BPSO and neural networks

作　　者：谭骏[1] 陈兴蜀[1] 杜敏[1] 

机构地区：[1]四川大学计算机学院,四川成都610065

出　　处：《中南大学学报（自然科学版）》2012年第6期2190-2197,共8页Journal of Central South University:Science and Technology

基　　金：国家重点基础研究发展规划("973"计划)项目(2007CB311106);国防重点实验室基金资助项目(NEUL20090101);科技部支撑项目(2012BAH18B05)

摘　　要：针对互联网中P2P协议以及加密协议无法使用传统方法进行识别的问题,提出一种新的基于会话流统计特征的网络协议识别算法。采用二进制粒子群算法(BPSO)定量选出最能体现不同协议区别的特征子集;并针对BP(Back Propagation)神经网络结构难以确定、易陷入局部极小值等缺陷进行分析,使用粒子群算法对BP神经网络进行优化以提高识别率。实验结果表明:该方法能够有效地从多种网络特征属性中选出最能体现不同协议区别的特征子集,且对于基于UDP协议的网络应用也有较高识别率,经优化后的BP神经网络具有更高识别率。该算法对常见的P2P协议平均识别率达到96%,且能够实时地对网络协议进行识别。Due to the unclassifiable problem of P2P protocol and encryption protocol by traditional approach in network management,a novel approach considering internet traffic flow was proposed to classify network applications especially P2P applications based on binary particle swarm optimization（BPSO） and optimized back-propagation（BP） neural network.BPSO was used to select the best feature subset which can mostly reflect the difference among different network applications.And BP neural network was optimized by PSO algorithm.The experimental results demonstrate that the proposed approach has a high recognition rate of network applications using either TCP or UDP protocol,and the identification rate is improved to 96% with the use of BPSO and optimized BP neural network.Moreover,the proposed algorithm can be used for real-time identification.

关 键 词：粒子群算法 神经网络 统计特征 流量识别 实时性 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]