首页>
外国专利>
System and method for using network application signatures based on term transition state machine
System and method for using network application signatures based on term transition state machine
展开▼
机译:基于术语过渡状态机的网络应用签名使用系统及方法
展开▼
页面导航
摘要
著录项
相似文献
摘要
A method for profiling network traffic of a network. The method includes identifying a training set having captured payloads corresponding to a set of flows associated with a network application, determining a set of signature terms from the training set, representing a portion of the captured payloads as regular expressions, representing a regular expression as a path in a term transition state machine (TTSM) including states coupled by at least a link that is assigned a signature term and a transition probability, the transition probability corresponding to a signature term transition to the signature term in the regular expression, and analyzing, based on the TTSM according to at least the transition probability, a flow separate from the set of flows and associated with a server in the network to determine the server as executing the network application.
展开▼