张路煜, 廖鹏, 赵俊峰, 郭靓. 基于卷积神经网络的未知协议识别方法[J]. 微电子学与计算机, 2018, 35(7): 106-108.
引用本文: 张路煜, 廖鹏, 赵俊峰, 郭靓. 基于卷积神经网络的未知协议识别方法[J]. 微电子学与计算机, 2018, 35(7): 106-108.
ZHANG Lu-yu, LIAO Peng, ZHAO Jun-feng, GUO Liang. A Method of Unknown Protocol Recognition Based on Convolution Neural Network[J]. Microelectronics & Computer, 2018, 35(7): 106-108.
Citation: ZHANG Lu-yu, LIAO Peng, ZHAO Jun-feng, GUO Liang. A Method of Unknown Protocol Recognition Based on Convolution Neural Network[J]. Microelectronics & Computer, 2018, 35(7): 106-108.

基于卷积神经网络的未知协议识别方法

A Method of Unknown Protocol Recognition Based on Convolution Neural Network

  • 摘要: 提出一种基于卷积神经网络深度学习的网络流协议识别方法, 利用网络流数据与图像的相似性, 绕过流量特征值选择和提取的工作, 直接将网络流数据作为卷积神经网络的输入, 训练网络流协议识别模型, 实现网络流协议识别功能.构建了一个含三层卷积层的卷积神经网络, 经实验生成网络协议识别模型, 对底层网络协议识别率达93.33%.该方法具备学习和扩展能力, 可扩展应用到对包含恶意代码网络流量的识别和对应用程序流量的识别.

     

    Abstract: In this paper, a network flow protocol recognition method based on convolution neural network depth learning is proposed. Taking advantage of the similarity between network flow data and image, the network flow data is directly used as convolution neural network input, without the work of selecting and extracting the feature of network flow. Using supervise learning to train network flow protocol identification model, network flow protocol identification is realized. In this paper, a convolution neural network with three convolution layers is constructed. The network protocol recognition model is generated experimentally. The recognition rate of the underlying network protocol is 93.33%. The method has the ability to learn and extend. It can be scalable to the identification of traffic containing malicious code and identification of application traffic.

     

/

返回文章
返回