LABEL GUIDED UNSUPERVISED LEARNING BASED NETWORK-LEVEL APPLICATION SIGNATURE GENERATION
展开▼
机译:标签引导无监督的基于学习的网络级应用签名生成
展开▼
页面导航
摘要
著录项
相似文献
摘要
Application-initiated network traffic is intercepted and analyzed by an application firewall in order to identify streams of traffic for a target application. An application signature generator preprocesses the raw data packets from the intercepted network traffic by tokenizing the data packets and then weighted each token according to its' importance for application identification. The weighted features for each data packet are clustered using an unsupervised learning model, and the resulting clusters are iteratively refined and re-clustered using a proximity score between the clusters and feature vectors for key tokens for the target application. The application signature generator generates a signature for the clusters corresponding to the target application which the application firewall implements for filtering network traffic.
展开▼