【作者】 刘创； 辛阳；

【Author】 LIU Chuang,XIN Yang (Information Security Center,Beijing University of Posts and Telecommunications,Beijing 100876,China)

【机构】 北京邮电大学 信息安全中心；

【摘要】 随着P2P和VoIP等网络技术的广泛应用,大量P2P和VoIP协议及其应用软件开始出现,如Utorrent、BitTorrent、BitComent、Thunder、SinaTV、Skype、PPStream、PPLive等,其在给人们带来生活上的方便的同时,也带来很多严重的问题,如占用大量的带宽传播网络病毒。目前如何有效的限制和管理P2P流量成为当前网络的研究热点,也是运营商和网络管理者急需解决的问题。本文通过研究DPI流量检测关键技术,来实现网络流量的协议分析,对流量识别技术进行了改进,提出了加密规则和关键字包长结合体规则,设计了网络流量检测流程,并进行了实验,实验结果表明所提方案具有提高网络流量识别率的作用。更多还原

【Abstract】 With the wide range of applications such as P2P and VoIP network technology,a large number of P2P,VoIP protocols and application software began to appear,such as uTorrent,BitTorrent, BitComent,Thunder,SinaTV Skype,PPStream,PPLive,etc.,Although it makes our life more convenient,it also brings a lot of serious problems.Such as taking up a lot of network bandwidth, spreading network viruses.How to limit and manage P2P traffic is becomingthe current research focus which is also a problem that need to be resolved by network operators and network managers.In this paper,we realize the protocol analysis of network traffic by researching the key technologies of the DPI traffic detection.We also improve traffic identification technology by proposingencryption rule and combination of keyword and packet length rule,designthe network traffic detection process,do experiment which shows that the proposed scheme can improve the recognition rate of network traffic.更多还原