As all of the current communication protocols are unconventional dedicated unknown ones while existing of prevention measures mainly aiming at the known protocols and based on port mapping or static features matching, they are useless for the monitonng and detection of the theft channel. To ensure the security of the network as well as the early warning of attacks and harmful behavior, policy-makers urgently need to provide an efficient way to identify an unknown protocol under the current structure cf the complex network environment. To solve these problems, this project would integrate the existing network security and data mining technology to design solutions discovering unknown protocols based on the datagram fingerprint relations, to meet the national cyber security and many other needs. In addition to a significant meaning on the protection of network security and macro warning area, it promoted and improved the capability of independent innovation of China' s network security and other aspects of the key technologies at the same lime.%目前,关于窃密防范措施基本上只针对已知协议,为了保证网络的安全运行以及对攻击与危害行为的预警,迫切需要在当前结构复杂的网络环境下为决策者准确提供一种能高效地对未知协议进行识别的方法.为此,在整合已有的网络安全和数据挖掘技术的基础上,设计了基于数据报指纹关系的未知协议识别发现的解决方案.
展开▼
