APPARATUS AND METHOD FOR CLASSIFYING ASYMMETRIC TRAFFIC BASED ON BEHAVIOR

摘要

The present invention relates to a behavior-based traffic classification device which includes: a signature-based analysis unit for requesting generation of an entry when a signature of inputted packet requires a behavior-based analysis; and a behavior-based analysis unit for having a behavior-based table, generating an entry of the behavior-based table according to the request of the signature-based analysis unit and synchronizing the entry generated in the behavior-based table to other service classification device. [Reference numerals] (100-1,100-2,100-N) Asymmetric behavior-based traffic classification device; (120-1,120-2,120-N) Behavior-based analysis unit; (121-1,121-2,121-N) Behavior-based table; (123-1,123-2,123-N) Synchronizing unit; (AA,DD) Service A; (BB) Payload encryption; (CC) Inbound traffic; (EE) Signature payload; (FF) Asymmetric traffic; (GG) Outbound traffic