基于多粒度的自适应UDP流检测

摘要

针对用户数据报协议(UDP)流检测研究不足,其准确率和效率不高等问题,提出一种基于多粒度的自适应UDP流检测方法.通过分析UDP流的特征,设计两种不同粒度的动态超时策略,对短流使用“细粒度”方法,对长流采用多粒度结合的方法.与其他超时策略比较,其准确率与固定超时相近,内存约占其他方法的75％.结果证实了方法适用于UDP流检测.%Concerning the lack of research on User Datagram Protocol (UDP) flow detection, and its low accuracy and efficiency, an adaptive UDP flow detection based on multi-granularity was proposed. Two different dynamic timeout strategies based on different granularity were designed by analyzing the characteristics of UDP flow. Compared with other timeout strategies, the accuracy of the proposed method was similar to the fixed timeout strategy, and the memory usage was only about 75% of the others. The experimental results show that the proposed method is suitable to the UDP flow detection.