CN105791009A - Method and system for collecting user internet-surfing behavior based on SDN (Software Defined Network) - Google Patents
Method and system for collecting user internet-surfing behavior based on SDN (Software Defined Network) Download PDFInfo
- Publication number
- CN105791009A CN105791009A CN201610118060.2A CN201610118060A CN105791009A CN 105791009 A CN105791009 A CN 105791009A CN 201610118060 A CN201610118060 A CN 201610118060A CN 105791009 A CN105791009 A CN 105791009A
- Authority
- CN
- China
- Prior art keywords
- message
- user
- internet behavior
- switch
- sdn
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/02—Standardisation; Integration
- H04L41/024—Standardisation; Integration using relational databases for representation of network management data, e.g. managing via structured query language [SQL]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
Abstract
The embodiment of the invention provides a method and a system for collecting user internet-surfing behavior based on SDN (Software Defined Network). The method comprises the following steps: receiving a private message sent from a controller by a switch in the SDN, wherein the private message comprises a record number, and a keyword for user internet-surfing behavior analysis; carrying out pre-analysis on received user messages by the switch according to the keyword for the user internet-surfing behavior analysis, obtaining message information corresponding to the keyword for the user internet-surfing behavior analysis in the user messages, and recording the message information to an information database; and when the number of the message information in the information database reaches to the record number, consolidating the message information in the information database, and sending the message information to the controller. According to the method and the system disclosed by the invention, the number of the user messages received by the controller can be reduced, and the controller is prevented from being attacked.
Description
Technical field
The present embodiments relate to communication technical field, particularly relate to a kind of family internet behavior collection method based on SDN (SoftwareDefinedNetwork, software defined network) and system.
Background technology
Along with the level of informatization improves constantly, the dependence of information system is increased therewith, and the safety problem of network information system just becomes more and more important, the effective internet behavior collected and monitor user, have become as a key areas of network security, be also increasingly subject to people's attention.
In the background program of web page server or HTML (Hypertext Markup Language), in default situations, port 80 is the port that server intercepts webpage client request.Port 80 is for HTTP (HyperTextTransferProtocol, HTML (Hypertext Markup Language)) open, this is the maximum agreement of access times of surfing the web, it is mainly used in WWW (WorldWideWeb, WWW) transmit the agreement of information, it is possible to add ": 80 " accessing website by http address (network address often said), because browsing the port numbers that web service gives tacit consent to is 80, therefore network address need to only be inputted, need not input ": 80 ".8080 ports, with 80 ports, are used to WWW agency service, it is possible to achieve web page browsing, in time being everlasting access some websites or use proxy server, can add ": 8080 " port numbers.
In SDN, when carrying out user's internet behavior and analyzing, needing filtering port in SDN switch is the user's message of 80 or 8080, and the message that these are filtered out is sent to controller, message analysis is carried out by controller, and record user's internet behavior information, owing to these users surf the Net row information not only at the head of user's message, URL (the UniformResoureLocator that such as user accesses, uniform resource locator) information, just in the payload (payload) of the TCP (TransmissionControlProtocol transmission control protocol) of message, therefore, user's message needs to be sent completely to controller, controller just can be made to get whole effective informations.
Conventionally, as switch cannot merge user's message to reduce the quantity sending controller on user's message, when user's message enormous amount, controller is under attack, it may be difficult to be analyzed processing.
Summary of the invention
The embodiment of the present invention provides a kind of user's internet behavior collection method based on SDN and system, by carrying out user's internet behavior preanalysis, multiple analysis results can be configured to an open flows message and be sent to controller, thus reducing controller to receive the quantity of user's message, it is prevented that controller is hacked.
The embodiment of the present invention provides a kind of user's internet behavior collection method based on SDN, the method is applied in SDN, including: the switch in SDN receives the private message that controller issues, and described private message includes record number and the keyword of user's internet behavior analysis；Switch carries out preanalysis according to user's message to receiving of the keyword of described user's internet behavior analysis, obtain message information corresponding with the keyword that described user's internet behavior is analyzed in described user's message, and by described message information record in information database；When the quantity of message information reaches record number in described information database, message information in described information database is merged and gives controller.
Further, described private message is open flows Package-out message, described open flows Package-out extension of message record digital section and user's internet behavior analyze field, wherein record digital section is used for storing record number, and user's internet behavior analyzes field for storing the keyword that user's internet behavior is analyzed.
Further, described method also includes: switch is pre-configured with the proxy server of user's internet behavior preanalysis, described proxy server obtains the keyword that the user's internet behavior in described open flows Package-out message is analyzed, message information corresponding in described user's message is obtained according to described keyword, by described message information record in information database, when in information database, message information reaches described record number, message information is merged.
Further, described method also includes: the switch that the stream table that filtering port is 80 or 8080 is handed down in SDN by controller；Described switch carries out preanalysis according to user's message to receiving of the keyword of described user's internet behavior analysis, including: after switch receives the stream table that controller issues, create described stream table on switches；Switch to the port received be 80 or 8080 user's message be filtered；The user's message that switch will filter out is sent to proxy server, and the user's message mirror image that will filter out is to the CPU of switch, and user's message is carried out preanalysis by wherein said proxy server, and is stored in information database by the message information after analyzing.
Further, it is described when in described information database, the quantity of message information reaches record number, message information in described information database is merged and gives controller, including: when in described information database, the quantity of message information reaches record number, switch merges the message information in described information database, is configured to open flows package-in message and is sent to controller.
Further, described method also includes: after completing to the described open flows package-in message of controller transmission, switch empties described information database of record.
Present invention also offers a kind of user's internet behavior based on SDN and collect system, this system is applied in SDN, including: controller, for issuing private message to the controller in SDN, described private message includes record number and the keyword of user's internet behavior analysis；Switch, for carrying out preanalysis according to the keyword of the described user's internet behavior analysis user's message to receiving, obtain message information corresponding with the keyword that described user's internet behavior is analyzed in described user's message, and by described message information record in information database；When the quantity of message information reaches record number in described information database, message information in described information database is merged and gives controller.
Further, described controller is open flows Package-out message to the private message that switch sends, described open flows Package-out extension of message record digital section and user's internet behavior analyze field, wherein record digital section is used for storing record number, and user's internet behavior analyzes field for storing the keyword that user's internet behavior is analyzed；Described switch is open flows package-in message to the message that controller sends, and described open flows package-in message includes the message information after switch merges.
Further, described controller is additionally operable to: the switch being handed down in SDN by the stream table that filtering port is 80 or 8080；Described switch includes: filtering module, for after receiving the stream table that controller issues, creates described stream table on switches, and to the port received be 80 or 8080 user's message be filtered；The user's message that will filter out is sent to proxy server, and the user's message mirror image that will filter out is to CPU；Proxy server, for obtaining the keyword that the user's internet behavior in described open flows Package-out message is analyzed, message information corresponding in described user's message is obtained according to described keyword, by described message information record in information database, when in information database, message information reaches described record number, message information is merged；Information database, wherein stores the message information after proxy server preanalysis.
Further, described switch also includes: removing module, and for after completing to the described open flows package-in message of controller transmission, switch empties described information database of record.
The embodiment of the present invention is based on user's internet behavior collection method of SDN and system, for avoiding controller to receive a large number of users message, alleviate controller Message processing burden, increase user's internet behavior preanalysis function on switches, according to user's internet behavior field that controller is arranged, relevant information is extracted from message, and record exchanger information data base, when recording number and reaching the quantity arranged, switch fabric open flows message, preanalysis result is sent to controller by package-in message, owing to only sending preanalysis result, and multiple records are merged into a message, decreasing changes planes is sent to the message amount of controller.
Accompanying drawing explanation
In order to be illustrated more clearly that the embodiment of the present invention or technical scheme of the prior art, the accompanying drawing used required in embodiment or description of the prior art will be briefly described below, apparently, accompanying drawing in the following describes is some embodiments of the present invention, for those of ordinary skill in the art, under the premise not paying creative work, it is also possible to obtain other accompanying drawing according to these accompanying drawings.
Fig. 1 is the schematic flow sheet of the user's internet behavior collection method in the embodiment of the present invention based on SDN；
Fig. 2 is the detailed process schematic diagram of the user's internet behavior collection method in the embodiment of the present invention based on SDN；
Fig. 3 is the configuration diagram collecting system in the embodiment of the present invention based on user's internet behavior of SDN；
Fig. 4 is the structural representation of switch in the embodiment of the present invention.
Detailed description of the invention
For making the purpose of the embodiment of the present invention, technical scheme and advantage clearly, below in conjunction with the accompanying drawing in the embodiment of the present invention, technical scheme in the embodiment of the present invention is clearly and completely described, obviously, described embodiment is a part of embodiment of the present invention, rather than whole embodiments.Based on the embodiment in the present invention, the every other embodiment that those of ordinary skill in the art obtain under not making creative work premise, broadly fall into the scope of protection of the invention.
SDN is a kind of novel network architecture, and the chain of command of the network equipment and data surface can be easily separated by it by OpenFlow (open flows) technology, thus realizing the flexible control to network traffics.
Fig. 1 is the schematic flow sheet of the user's internet behavior collection method in the embodiment of the present invention based on SDN, and the method is applied in SDN, comprises the controller realizing chain of command function and some switches realizing data surface function in this SDN, and the method includes:
Switch in step S11, SDN receives the private message that controller issues, and described private message includes record number and the keyword of user's internet behavior analysis.
Step S12, switch carries out preanalysis according to user's message to receiving of the keyword of described user's internet behavior analysis, obtain message information corresponding with the keyword that described user's internet behavior is analyzed in described user's message, and by described message information record in information database.
Step S13, when in described information database, the quantity of message information reaches record number, message information in described information database is merged and gives controller by switch.
Fig. 2 be based in the embodiment of the present invention of Fig. 1 based on the detailed process schematic diagram of user's internet behavior collection method of SDN, the method is applied in SDN, including:
Controller in step S21, SDN extends the private message issued to switch in advance.
In this step, controller is open flows Package-out message to the private message that the switch in SDN issues.
Compared to the prior art, this open flows Package-out extension of message record digital section and user's internet behavior analyze field, and wherein record digital section is used for storing record number, and user's internet behavior analyzes field for storing the keyword that user's internet behavior is analyzed.
Switch in step S22, SDN is pre-configured with the proxy server of user's internet behavior preanalysis, and this proxy server performs user's internet behavior preanalysis function.
In this step, compared to the prior art, switch in SDN is pre-configured with the proxy server of user's internet behavior preanalysis, this proxy server performs user's internet behavior preanalysis function, this user's internet behavior preanalysis function can carry out preanalysis according to the user's message that switch is received by keyword and form message information, and merged by multiple message informations.
Step S23, controller sets record number and the keyword of user's internet behavior analysis, is handed down to the switch in SDN by private message.
In this step, network manager sets record number and the keyword of user's internet behavior analysis by controller, record number is filled in the record digital section in open flows Package-out message, the keyword of user's internet behavior analysis is filled in the user's internet behavior in open flows Package-out message and analyzes field, and this open flows Package-out message is handed down to the switch in SDN.
Step S24, the switch that the stream table that filtering port is 80 or 8080 is handed down in SDN by controller.
In this step, when carrying out user's internet behavior and analyzing, it is necessary on the switch in SDN, filtering port is the user's message of 80 or 8080, and wherein 80 is the default port number of HTTP, and 8080 is the default port number of HTTP Proxy.
The switch that the stream table that filtering port is 80 or 8080 is handed down in SDN by controller, this stream table action is mirror user message to CPU.
Step S25, switch to the port received be 80 or 8080 user's message be filtered.
In this step, after switch receives the stream table that controller issues, create this stream table on switches；To the port received be 80 or 8080 user's message be filtered.
Step S26, the user's message that switch will filter out is sent to proxy server, and user's message is carried out preanalysis by proxy server, and is stored in information database by the message information after analyzing.
In this step, the kernel (Linuxkernel) of switch intercepts the user's message filtered out, and is sent to proxy server, and the user's message mirror image that will filter out is to the CPU of switch.
Compared to the prior art, switch carries out preanalysis by proxy server, specifically, after proxy server receives the open flows Package-out message that controller issues, get the keyword that the user's internet behavior in this open flows Package-out message is analyzed, thus the keyword according to the analysis of described user's internet behavior obtains message information corresponding with the keyword that described user's internet behavior is analyzed in described user's message, and by described message information record in information database.
Step S27, the proxy server of switch judges whether the quantity of message information reaches record number, if it is, carry out step S28；If it does not, return step S26.
In this step, after proxy server receives the open flows Package-out message that controller issues, getting the record number in this open flows Package-out message, proxy server judges in information database, whether the quantity of message information reaches record number.
Step S28, message information in information database is merged by proxy server, and switch will give controller on the message after merging.
In this step, when in information database, the quantity of message information reaches record number, proxy server merges a plurality of message information in information database, is configured to open flows package-in message and is sent to controller.
Step S29, after switch is sent completely to controller, empties information database of record, returns step S26.
In this step, switch empties information database of record after completing to controller transmission open flows package-in message, and the user's message continuing to will filter out is sent to proxy server and carries out preanalysis.
Fig. 3 is the configuration diagram collecting system in the embodiment of the present invention based on user's internet behavior of SDN, this system is applied in SDN, comprises the SDN controller realizing chain of command function and some switches realizing data surface function, for instance S0, S1, S2 and S3 in this SDN, wherein
Controller, for issuing private message to the controller in SDN, described private message includes record number and the keyword of user's internet behavior analysis；
Switch, for carrying out preanalysis according to the keyword of the described user's internet behavior analysis user's message to receiving, obtain message information corresponding with the keyword that described user's internet behavior is analyzed in described user's message, and by described message information record in information database；When the quantity of message information reaches record number in described information database, message information in described information database is merged and gives controller.
Specifically,
Described controller is open flows Package-out message to the private message that switch sends, described open flows Package-out extension of message record digital section and user's internet behavior analyze field, wherein record digital section is used for storing record number, and user's internet behavior analyzes field for storing the keyword that user's internet behavior is analyzed.
Described switch is open flows package-in message to the message that controller sends, and described open flows package-in message includes the message information after switch merges.
Described controller is additionally operable to: the switch being handed down in SDN by the stream table that filtering port is 80 or 8080.
As shown in Figure 4, described switch includes:
Receiver module, for receiving stream table and the open flows Package-out message that controller issues；
Filtering module, for after receiving the stream table that controller issues, creates described stream table on switches, and to the port received be 80 or 8080 user's message be filtered；The user's message that will filter out is sent to proxy server, and the user's message mirror image that will filter out is to CPU；
Proxy server, for obtaining the keyword that the user's internet behavior in described open flows Package-out message is analyzed, message information corresponding in described user's message is obtained according to described keyword, by described message information record in information database, when in information database, message information reaches described record number, message information is merged；
Information database, for storing the message information after proxy server preanalysis；
Sending module, for being sent to controller by the open flows package-in message of message information after including merging；
Removing module, for, after the open flows package-in message sent to controller completes, emptying described information database of record.
Concrete ins and outs based on user's internet behavior collection system of SDN are similar with the aforesaid ins and outs corresponding based on user's internet behavior collection method of SDN, therefore are not repeated herein.
The embodiment of the present invention is based on user's internet behavior collection method of SDN and system, for avoiding controller to receive a large number of users message, alleviate controller Message processing burden, increase user's internet behavior preanalysis function on switches, according to user's internet behavior field that controller is arranged, relevant information is extracted from message, and record exchanger information data base, when recording number and reaching the quantity arranged, switch fabric open flows message, preanalysis result is sent to controller by package-in message, owing to only sending preanalysis result, and multiple records are merged into a message, decreasing changes planes is sent to the message amount of controller.
Device embodiment described above is merely schematic, the wherein said unit illustrated as separating component can be or may not be physically separate, the parts shown as unit can be or may not be physical location, namely may be located at a place, or can also be distributed on multiple NE.Some or all of module therein can be selected according to the actual needs to realize the purpose of the present embodiment scheme.Those of ordinary skill in the art, when not paying performing creative labour, are namely appreciated that and implement.
Through the above description of the embodiments, those skilled in the art is it can be understood that can add the mode of required general hardware platform by software to each embodiment and realize, naturally it is also possible to pass through hardware.Based on such understanding, the part that prior art is contributed by technique scheme substantially in other words can embody with the form of software product, this computer software product can store in a computer-readable storage medium, such as ROM/RAM, magnetic disc, CD etc., including some instructions with so that a computer equipment (can be personal computer, server, or the network equipment etc.) perform the method described in some part of each embodiment or embodiment.
Last it is noted that above example is only in order to illustrate technical scheme, it is not intended to limit；Although the present invention being described in detail with reference to previous embodiment, it will be understood by those within the art that: the technical scheme described in foregoing embodiments still can be modified by it, or wherein portion of techniques feature is carried out equivalent replacement；And these amendments or replacement, do not make the essence of appropriate technical solution depart from the spirit and scope of various embodiments of the present invention technical scheme.
Claims (10)
1. the user's internet behavior collection method based on SDN, it is characterised in that the method is applied in SDN, including:
Switch in SDN receives the private message that controller issues, and described private message includes record number and the keyword of user's internet behavior analysis；
Switch carries out preanalysis according to user's message to receiving of the keyword of described user's internet behavior analysis, obtain message information corresponding with the keyword that described user's internet behavior is analyzed in described user's message, and by described message information record in information database；
When in described information database, the quantity of message information reaches record number, message information in described information database is merged and gives controller by switch.
2. the user's internet behavior collection method based on SDN according to claim 1, it is characterized in that, described private message is open flows Package-out message, described open flows Package-out extension of message record digital section and user's internet behavior analyze field, wherein record digital section is used for storing record number, and user's internet behavior analyzes field for storing the keyword that user's internet behavior is analyzed.
3. the user's internet behavior collection method based on SDN according to claim 2, it is characterised in that described user's internet behavior collection method based on SDN also includes:
Switch is pre-configured with the proxy server of user's internet behavior preanalysis, described proxy server obtains the keyword that the user's internet behavior in described open flows Package-out message is analyzed, message information corresponding in described user's message is obtained according to described keyword, by described message information record in information database, when in information database, message information reaches described record number, message information is merged.
4. the user's internet behavior collection method based on SDN according to claim 1, it is characterised in that described user's internet behavior collection method based on SDN also includes:
The switch that the stream table that filtering port is 80 or 8080 is handed down in SDN by controller；
Described switch carries out preanalysis according to user's message to receiving of the keyword of described user's internet behavior analysis, including:
After switch receives the stream table that controller issues, create described stream table on switches；
Switch to the port received be 80 or 8080 user's message be filtered；
The user's message that switch will filter out is sent to proxy server, and the user's message mirror image that will filter out is to the CPU of switch, and user's message is carried out preanalysis by wherein said proxy server, and is stored in information database by the message information after analyzing.
5. the user's internet behavior collection method based on SDN according to claim 1, it is characterized in that, when the quantity of message information reaches record number in described information database, message information in described information database is merged and gives controller, including:
When in described information database, the quantity of message information reaches record number, switch merges the message information in described information database, is configured to open flows package-in message and is sent to controller.
6. the user's internet behavior collection method based on SDN according to claim 5, it is characterised in that described user's internet behavior collection method based on SDN also includes:
After completing to the described open flows package-in message of controller transmission, switch empties described information database.
7. the user's internet behavior based on SDN collects system, it is characterised in that this system is applied in SDN, including:
Controller, for issuing private message to the controller in SDN, described private message includes record number and the keyword of user's internet behavior analysis；
Switch, for carrying out preanalysis according to the keyword of the described user's internet behavior analysis user's message to receiving, obtain message information corresponding with the keyword that described user's internet behavior is analyzed in described user's message, and by described message information record in information database；When the quantity of message information reaches record number in described information database, message information in described information database is merged and gives controller.
8. the user's internet behavior based on SDN according to claim 7 collects system, it is characterized in that, described controller is open flows Package-out message to the private message that switch sends, described open flows Package-out extension of message record digital section and user's internet behavior analyze field, wherein record digital section is used for storing record number, and user's internet behavior analyzes field for storing the keyword that user's internet behavior is analyzed；
Described switch is open flows package-in message to the message that controller sends, and described open flows package-in message includes the message information after switch merges.
9. the user's internet behavior collection method based on SDN according to claim 8, it is characterised in that described controller is additionally operable to: the switch being handed down in SDN by the stream table that filtering port is 80 or 8080；
Described switch includes:
Filtering module, for after receiving the stream table that controller issues, creates described stream table on switches, and to the port received be 80 or 8080 user's message be filtered；The user's message that will filter out is sent to proxy server, and the user's message mirror image that will filter out is to CPU；
Proxy server, for obtaining the keyword that the user's internet behavior in described open flows Package-out message is analyzed, message information corresponding in described user's message is obtained according to described keyword, by described message information record in information database, when in information database, message information reaches described record number, message information is merged；
Information database, wherein stores the message information after proxy server preanalysis.
10. the user's internet behavior based on SDN according to claim 9 collects system, it is characterised in that described switch also includes:
Removing module, for after completing to the described open flows package-in message of controller transmission, switch empties described information database of record.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610118060.2A CN105791009A (en) | 2016-03-02 | 2016-03-02 | Method and system for collecting user internet-surfing behavior based on SDN (Software Defined Network) |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610118060.2A CN105791009A (en) | 2016-03-02 | 2016-03-02 | Method and system for collecting user internet-surfing behavior based on SDN (Software Defined Network) |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN105791009A true CN105791009A (en) | 2016-07-20 |
Family
ID=56387755
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610118060.2A Pending CN105791009A (en) | 2016-03-02 | 2016-03-02 | Method and system for collecting user internet-surfing behavior based on SDN (Software Defined Network) |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105791009A (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107547308A (en) * | 2017-07-28 | 2018-01-05 | 新华三技术有限公司 | A kind of controller in message mirror-image method, device, software defined network SDN |
| CN107682313A (en) * | 2017-08-28 | 2018-02-09 | 网宿科技股份有限公司 | Data transmission method and server |
| CN113542239A (en) * | 2021-06-29 | 2021-10-22 | 武汉思普崚技术有限公司 | Authentication method, system, device and storage medium based on Web monitoring |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101166084A (en) * | 2006-10-17 | 2008-04-23 | 中兴通讯股份有限公司 | Secure method for preventing multicast user from attacking |
| CN102523131A (en) * | 2011-12-07 | 2012-06-27 | 上海海高通信发展有限公司 | User internet behavior collecting method and system and user internet behavior analyzing method and system |
| CN102905311A (en) * | 2012-09-29 | 2013-01-30 | 北京傲天动联技术有限公司 | Data-message aggregating device and method |
| CN102946325A (en) * | 2012-11-14 | 2013-02-27 | 中兴通讯股份有限公司 | Network diagnosis method, system and equipment based on software defined network |
| CN104468254A (en) * | 2013-09-24 | 2015-03-25 | 中兴通讯股份有限公司 | Network flow statistic reporting processing method and device, controller and switch |
| US20150312307A1 (en) * | 2013-03-14 | 2015-10-29 | Cisco Technology, Inc. | Method for streaming packet captures from network access devices to a cloud server over http |
-
2016
- 2016-03-02 CN CN201610118060.2A patent/CN105791009A/en active Pending
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101166084A (en) * | 2006-10-17 | 2008-04-23 | 中兴通讯股份有限公司 | Secure method for preventing multicast user from attacking |
| CN102523131A (en) * | 2011-12-07 | 2012-06-27 | 上海海高通信发展有限公司 | User internet behavior collecting method and system and user internet behavior analyzing method and system |
| CN102905311A (en) * | 2012-09-29 | 2013-01-30 | 北京傲天动联技术有限公司 | Data-message aggregating device and method |
| CN102946325A (en) * | 2012-11-14 | 2013-02-27 | 中兴通讯股份有限公司 | Network diagnosis method, system and equipment based on software defined network |
| US20150312307A1 (en) * | 2013-03-14 | 2015-10-29 | Cisco Technology, Inc. | Method for streaming packet captures from network access devices to a cloud server over http |
| CN104468254A (en) * | 2013-09-24 | 2015-03-25 | 中兴通讯股份有限公司 | Network flow statistic reporting processing method and device, controller and switch |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107547308A (en) * | 2017-07-28 | 2018-01-05 | 新华三技术有限公司 | A kind of controller in message mirror-image method, device, software defined network SDN |
| CN107682313A (en) * | 2017-08-28 | 2018-02-09 | 网宿科技股份有限公司 | Data transmission method and server |
| CN107682313B (en) * | 2017-08-28 | 2020-05-12 | 网宿科技股份有限公司 | Data transmission method and server |
| CN113542239A (en) * | 2021-06-29 | 2021-10-22 | 武汉思普崚技术有限公司 | Authentication method, system, device and storage medium based on Web monitoring |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9516046B2 (en) | Analyzing a group of values extracted from events of machine data relative to a population statistic for those values | |
| CN103179132B (en) | A kind of method and device detecting and defend CC attack | |
| KR100848319B1 (en) | Harmful web site filtering method and apparatus using web structural information | |
| CN107341395B (en) | Method for intercepting reptiles | |
| US20090049171A1 (en) | System and computer-readable medium for controlling access in a distributed data processing system | |
| CN107547490B (en) | Scanner identification method, device and system | |
| CN110020062B (en) | Customizable web crawler method and system | |
| US10972496B2 (en) | Upload interface identification method, identification server and system, and storage medium | |
| KR20030048045A (en) | A method for searching and analysing information in data networks | |
| CN109359263B (en) | User behavior feature extraction method and system | |
| CN115134099A (en) | Network attack behavior analysis method and device based on full flow | |
| Bhargav et al. | Pattern discovery and users classification through web usage mining | |
| CN105791009A (en) | Method and system for collecting user internet-surfing behavior based on SDN (Software Defined Network) | |
| US20150128280A1 (en) | Network service interface analysis | |
| WO2020257428A1 (en) | Dynamically controlling access to linked content in electronic communications | |
| Castellano et al. | LODAP: a log data preprocessor for mining web browsing patterns | |
| Singh et al. | Enhancing the performance of web proxy server through cluster based prefetching techniques | |
| CN103354546A (en) | Message filtering method and message filtering apparatus | |
| CN112364274A (en) | WEB site access acceleration method and device | |
| US9853946B2 (en) | Security compliance for cloud-based machine data acquisition and search system | |
| Lokeshkumar et al. | A survey on preprocessing of web log file in web usage mining to improve the quality of data | |
| Wang et al. | Towards comprehensive analysis of tor hidden service access behavior identification under obfs4 scenario | |
| EP2827556B1 (en) | Method and system for content curation in internet networks | |
| CN108268370B (en) | Website quality analysis method, device and system based on Referer and template library matching | |
| Shailesh et al. | Performance driven development framework for web applications |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20160720 |
|
| RJ01 | Rejection of invention patent application after publication |