面向比特流的未知协议识别与分析技术综述  

Survey on bit stream oriented unknown protocol identification and analysis techniques

作　　者：雷东[1] 王韬[1] 赵建鹏[2] 马云飞[1] 

机构地区：[1]军械工程学院信息工程系,石家庄050003 [2]解放军外国语学院指挥系,河南洛阳471003

出　　处：《计算机应用研究》2016年第11期3206-3210,3250,共6页Application Research of Computers

基　　金：国家自然科学基金资助项目(61272491;61173191)

摘　　要：分析了未知协议的使用对网络安全监管带来的挑战,总结了现有已知协议识别技术存在的弊端;综述了现有面向比特流的协议识别研究领域所涉及的主要内容,重点研究了现有未知协议格式推断方法,包括频繁模式挖掘、关联规则挖掘、比特流帧切分以及协议格式推断并总结了各自的特点;最后讨论了下一步的研究方向。This paper analyzed the challenges presented by the use of unknown protocol for the network security supervision, collected and introduced the insufficiency of the existing protocol identification technology. It presented a comprehensive sur- vey of the existing main contents of bit stream oriented protocol identification research field, studied the method of inferring the format of unknown protocol including frequent pattern mining, association rule mining, frame segmentation and protocol format inferring, introduced and analyzed respectively features of these techniques. Finally it discussed the trend of research and application.

关 键 词：未知协议 比特流 协议格式推断 协议识别 

分 类 号：TP393.04[自动化与计算机技术—计算机应用技术]