自适应网络应用特征发现方法

摘要

An adaptive application signature extraction method (AdapSig) was proposed. AdapSig firstly extracted key-word sequences from payloads of packets, and then negative examples and redundancy filter were used to generate can-didate signatures. An adaptive mechanism based on self-identification rate was applied to select the final signature. Expe-rimental results show that application signatures extracted by AdapSig have high accuracy for various protocols.%　　提出了一种应用特征的自动提取方法。该方法首先从应用层载荷中提取关键词序列，然后通过负例子集合和冗余处理生成候选特征集，最后通过基于识别率的自适应机制选择应用特征。实验结果表明，该方法提取的应用特征能精确识别不同的协议。