PRIVATE PROTOCOL ESTIMATION SYSTEM USING PACKET HISTOGRAM AND ESTIMATION METHOD THEREOF

摘要

The present invention relates to a closed protocol estimation system based on a packet histogram, comprising: a packet collection unit that collects packets distributed over a network, and an average that generates an average histogram to extract protocol features using the collected packets. A histogram generation unit, a normalization unit that normalizes the generated average histogram to generate DNN (Deep Neural Network) input data, and the type of the private protocol input through the DNN based on the extracted protocol characteristics and the normalization result. It characterized in that it comprises an estimating unit to estimate.