CN109818782A - The method that a kind of pair of server is classified - Google Patents
The method that a kind of pair of server is classified Download PDFInfo
- Publication number
- CN109818782A CN109818782A CN201811652219.4A CN201811652219A CN109818782A CN 109818782 A CN109818782 A CN 109818782A CN 201811652219 A CN201811652219 A CN 201811652219A CN 109818782 A CN109818782 A CN 109818782A
- Authority
- CN
- China
- Prior art keywords
- server
- feature
- famous
- classified
- classification
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 35
- 238000004422 calculation algorithm Methods 0.000 claims abstract description 4
- 239000000523 sample Substances 0.000 claims description 15
- 238000004458 analytical method Methods 0.000 claims description 3
- 230000015572 biosynthetic process Effects 0.000 claims description 3
- 239000000284 extract Substances 0.000 claims description 3
- 238000003786 synthesis reaction Methods 0.000 claims description 3
- 244000097202 Rathbunia alamosensis Species 0.000 description 1
- 235000009776 Rathbunia alamosensis Nutrition 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 238000004883 computer application Methods 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 238000013135 deep learning Methods 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 239000004615 ingredient Substances 0.000 description 1
- 238000005457 optimization Methods 0.000 description 1
- 238000005070 sampling Methods 0.000 description 1
Landscapes
- Computer And Data Communications (AREA)
Abstract
It includes: that server feature obtains that the present invention, which provides the method that a kind of pair of server is classified: acquisition all user access servers of a cycle and the data of all detecting devices access server first calculate the feature of Servers-all based on these data；Sample mark: sample mark is carried out to dated server；Automatic classification: according to famous intelligent algorithm, disaggregated model is built into the sample after mark；When encountering a new server, its feature is obtained first, then classified automatically with disaggregated model, obtain classification results.By way of passively obtaining and active obtains, the access information of a large amount of servers is acquired, mechanized classification can be carried out to server by classification server program, it can a large amount of processing server data, sampled data radix is more and more comprehensive, and it is more accurate to classify, and reduces the probability of erroneous judgement.
Description
Technical field
The present invention relates to the methods that computer application field more particularly to a kind of pair of server are classified.
Background technique
Current internet content is quickly grown, and there are up to ten million preferred servers in the whole world, all can be increased or be deleted very daily
Multiserver.Under network operator's environment, it is often necessary to carry out the network optimization to internet content, the prior art is usually logical
It crosses and packet capturing is carried out to browser, software, APP, obtain the corresponding server such as website, game, video, these servers are carried out
Classification, such as it is divided into Website server, game server, video server.But have following defects that manual operations, can only
Handle a small amount of server, sampling causes to be easy erroneous judgement less.Therefore there is an urgent need to one kind, and automation point can be carried out to new demand servicing device
The technology of class.
Summary of the invention
In view of the above-mentioned problems, the present invention provides the methods that a kind of pair of server is classified.
To achieve the above object, present invention employs following technical solutions:
The method that a kind of pair of server is classified, comprising the following steps:
S1: server feature obtains: acquisition all user access servers of a cycle and the access of all detecting devices first
The data of server calculate the feature of Servers-all based on these data；
S2: sample mark sample mark: is carried out to dated server；
S3: according to famous intelligent algorithm, disaggregated model automatic classification: is built into the sample after mark；When encountering one
When new server, its feature is obtained first, then classified automatically with disaggregated model, obtain classification results.
Preferably, step S1 includes: passive obtains and actively acquisition.
Preferably, passive obtain is by the way that it is each to merge combination in all uplink and downlink flow packets for intercepting network core node
The various agreements of layer obtain the access information of Servers-all.
Preferably: user accesses internet by carrier network, and mirror image is all at the core node of carrier network
Flow extracts feature with protocol analysis system.
Preferably, actively obtaining is the server for being directed to known ip, carries out various remote probes to it, obtains it and believe substantially
Breath.
Preferably, the sample mask method of step S2 is two kinds, and one is the mask methods based on famous server, a kind of
It is the mask method based on famous agreement.
It is preferably based on the mask method strategy of famous server are as follows: collect the corresponding famous server of each classification；So
These servers are labeled as corresponding classification afterwards.
Be preferably based on the strategy of the mask method of famous agreement are as follows: according to network model, collect respectively famous agreement and
Its corresponding feature；A weight is arranged in each feature, according to the feature of the corresponding all actual request agreements of server, calculates
One synthesis point；Comprehensive point reaches a certain level, it is possible to determine that server belongs to some classification.
Compared with prior art, the invention has the benefit that acquisition is big by way of passively obtaining and active obtains
The access information for measuring server can carry out mechanized classification to server by classification server program, can largely handle clothes
Business device data, sampled data radix is more and more comprehensive, and it is more accurate to classify, and reduces the probability of erroneous judgement.
Detailed description of the invention
Fig. 1 is the flow chart for the method that a kind of pair of server of the invention is classified；
Fig. 2 is the structure chart that server feature of the invention passively obtains.
Specific embodiment
To make to have further understanding to the purpose of the present invention, construction, feature and its function, hereby cooperate embodiment detailed
It is described as follows.
Fig. 1 and Fig. 2 are please referred to, Fig. 1 is the flow chart for the method that a kind of pair of server of the invention is classified；Fig. 2 is
The structure chart that server feature of the invention passively obtains.
As shown in Figure 1, the present invention provides the methods that a kind of pair of server is classified, method includes the following steps:
S1: server feature obtains: acquisition all user access servers of a cycle and the access of all detecting devices first
The data of server calculate the feature of Servers-all based on these data.The length in one of them period is according to user demand
Freely set.
Preferably, step S1 includes: passive obtains and actively acquisition.
Preferably, passive obtain is by all uplink and downlinks for intercepting network core node (usually core switch)
Flow packet merges the access information for combining each various agreements of layer to obtain Servers-all.Structure chart is as shown in Figure 2.To Fig. 2's
It is explained as follows:
1) multiple users access internet (representing in figure with server) using the network that operator provides；
2) carrier network is divided into multistage, but core node is usually only several；
3) in core node, all flows of mirror image extract feature for protocol analysis system.
Preferably, actively obtaining is the server for being directed to known ip, carries out various remote probes to it, obtains it and believe substantially
Breath.These detection gimmicks detect (ping/traceroute/ port scan etc.), infrastructure service including but not limited to: basic network
It detects (http/ftp etc.).
S2: sample mark sample mark: is carried out to dated server.
Preferably, the sample mask method of step S2 is two kinds, and one is the mask methods based on famous server, a kind of
It is the mask method based on famous agreement.
It is preferably based on the mask method strategy of famous server are as follows: collect the corresponding famous server of each classification (such as
Web page class is corresponding Baidu/Sina/Tencent etc., and game class is corresponding king's honor/hero alliance/talk on the journey to west etc.)；So
These servers are labeled as corresponding classification afterwards.
Be preferably based on the strategy of the mask method of famous agreement are as follows: according to network model, collect respectively famous agreement and
Its corresponding feature (such as http/ftp)；A weight is arranged in each feature, according to the corresponding all actual requests of server
The feature of agreement calculates synthesis point；Comprehensive point reaches a certain level, it is possible to determine that server belongs to some classification.
S3: it automatic classification: according to famous intelligent algorithm (such as deep learning network), is constructed with the sample after mark
Ingredient class model；When encountering a new server, its feature is obtained first, then classified automatically with disaggregated model, obtained
To classification results.Usually in one server of new discovery, according to the server feature got, and the classification mould precalculated
Type, 1 or the multiple classification that calculation server belongs to.
From the above mentioned, the method that a kind of pair of server of the invention is classified, by passively obtaining and actively acquisition
Mode acquires the access information of a large amount of servers, can carry out mechanized classification to server by classification server program, can
A large amount of processing server data, sampled data radix is more and more comprehensive, and it is more accurate to classify, and reduces the probability of erroneous judgement.
The present invention is described by above-mentioned related embodiment, however above-described embodiment is only to implement example of the invention.
It must be noted that the embodiment disclosed is not limiting as the scope of the present invention.On the contrary, do not depart from spirit of the invention and
It is changed and retouched made by range, belongs to scope of patent protection of the invention.
Claims (8)
1. the method that a kind of pair of server is classified, it is characterised in that: the following steps are included:
S1: server feature obtains: acquisition all user access servers of a cycle and the access of all detecting devices first
The data of server calculate the feature of Servers-all based on these data；
S2: sample mark sample mark: is carried out to dated server；
S3: according to famous intelligent algorithm, disaggregated model automatic classification: is built into the sample after mark；When encountering one
When new server, its feature is obtained first, then classified automatically with disaggregated model, obtain classification results.
2. the method classified as described in claim 1 to server, it is characterised in that: step S1 includes: passive acquisition
It is obtained with active.
3. the method classified as claimed in claim 2 to server, it is characterised in that: passive obtain is by intercepting
All uplink and downlink flow packets of network core node merge and combine each various agreements of layer to obtain the access letter of Servers-all
Breath.
4. the method classified as claimed in claim 3 to server, it is characterised in that: user is visited by carrier network
Ask internet, all flows of mirror image at the core node of carrier network extract feature with protocol analysis system.
5. the method classified as claimed in claim 2 to server, it is characterised in that: actively obtaining is for known ip
Server, various remote probes are carried out to it, obtain its essential information.
6. the method classified as described in claim 1 to server, it is characterised in that: the sample mask method of step S2
It is two kinds, one is the mask methods based on famous server, and one is the mask methods based on famous agreement.
7. the method classified as claimed in claim 6 to server, it is characterised in that: the mark based on famous server
Methods and strategies are as follows: collect the corresponding famous server of each classification；Then these servers are labeled as corresponding classification.
8. the method classified as claimed in claim 6 to server, it is characterised in that: the mark side based on famous agreement
The strategy of method are as follows: according to network model, collect famous agreement feature corresponding with its respectively；A weight is arranged in each feature,
According to the feature of the corresponding all actual request agreements of server, synthesis point is calculated；Comprehensive point reaches a certain level, can be with
Determining server belongs to some classification.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811652219.4A CN109818782A (en) | 2018-12-31 | 2018-12-31 | The method that a kind of pair of server is classified |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811652219.4A CN109818782A (en) | 2018-12-31 | 2018-12-31 | The method that a kind of pair of server is classified |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN109818782A true CN109818782A (en) | 2019-05-28 |
Family
ID=66603979
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811652219.4A Pending CN109818782A (en) | 2018-12-31 | 2018-12-31 | The method that a kind of pair of server is classified |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109818782A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111756598A (en) * | 2020-06-23 | 2020-10-09 | 北京凌云信安科技有限公司 | Asset discovery method based on combination of active detection and flow analysis |
| US11323342B1 (en) | 2020-10-29 | 2022-05-03 | Red Hat, Inc. | Host auto role classifier |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20130066814A1 (en) * | 2011-09-12 | 2013-03-14 | Volker Bosch | System and Method for Automated Classification of Web pages and Domains |
| CN104717107A (en) * | 2015-03-27 | 2015-06-17 | 北京奇虎科技有限公司 | Method, device and system for detecting network device |
| CN105071954A (en) * | 2015-07-17 | 2015-11-18 | 云南电网有限责任公司信息中心 | Resource pool fault diagnosis and positioning processing method based on probe technology |
| CN105701498A (en) * | 2015-12-31 | 2016-06-22 | 腾讯科技（深圳）有限公司 | User classification method and server |
| CN107395409A (en) * | 2017-07-14 | 2017-11-24 | 国网山东省电力公司淄博供电公司 | A kind of Electricity Information Network with communication quality monitoring |
| CN107967488A (en) * | 2017-11-28 | 2018-04-27 | 网宿科技股份有限公司 | The sorting technique and categorizing system of a kind of server |
| CN108777640A (en) * | 2018-06-04 | 2018-11-09 | 腾讯科技（深圳）有限公司 | A kind of server detection method, device, system and storage medium |
| CN108833197A (en) * | 2018-04-10 | 2018-11-16 | 中国科学院信息工程研究所 | A kind of active probe method based on cloud and test platform |
-
2018
- 2018-12-31 CN CN201811652219.4A patent/CN109818782A/en active Pending
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20130066814A1 (en) * | 2011-09-12 | 2013-03-14 | Volker Bosch | System and Method for Automated Classification of Web pages and Domains |
| CN104717107A (en) * | 2015-03-27 | 2015-06-17 | 北京奇虎科技有限公司 | Method, device and system for detecting network device |
| CN105071954A (en) * | 2015-07-17 | 2015-11-18 | 云南电网有限责任公司信息中心 | Resource pool fault diagnosis and positioning processing method based on probe technology |
| CN105701498A (en) * | 2015-12-31 | 2016-06-22 | 腾讯科技（深圳）有限公司 | User classification method and server |
| CN107395409A (en) * | 2017-07-14 | 2017-11-24 | 国网山东省电力公司淄博供电公司 | A kind of Electricity Information Network with communication quality monitoring |
| CN107967488A (en) * | 2017-11-28 | 2018-04-27 | 网宿科技股份有限公司 | The sorting technique and categorizing system of a kind of server |
| CN108833197A (en) * | 2018-04-10 | 2018-11-16 | 中国科学院信息工程研究所 | A kind of active probe method based on cloud and test platform |
| CN108777640A (en) * | 2018-06-04 | 2018-11-09 | 腾讯科技（深圳）有限公司 | A kind of server detection method, device, system and storage medium |
Non-Patent Citations (1)
| Title |
|---|
| 李荣荣;牛立栋;孙纪敏;: "基于CloudSim的分类负载均衡调度模型", no. 03 * |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111756598A (en) * | 2020-06-23 | 2020-10-09 | 北京凌云信安科技有限公司 | Asset discovery method based on combination of active detection and flow analysis |
| US11323342B1 (en) | 2020-10-29 | 2022-05-03 | Red Hat, Inc. | Host auto role classifier |
| US11824742B2 (en) | 2020-10-29 | 2023-11-21 | Red Hat, Inc. | Host auto role classifier |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102307123B (en) | NAT (Network Address Translation) flow identification method based on transmission layer flow characteristic | |
| CN105930727B (en) | Reptile recognition methods based on Web | |
| CN115134099B (en) | Network attack behavior analysis method and device based on full flow | |
| CN107018001B (en) | Application fault positioning method and device | |
| CN109600317A (en) | A kind of automatic identification flow simultaneously extracts method and device using rule | |
| CN101741644A (en) | Flow detection method and apparatus | |
| CN111107423A (en) | Video service playing card pause identification method and device | |
| CN109905873B (en) | Network account correlation method based on characteristic identification information | |
| CN107733886A (en) | The application layer ddos attack detection method that a kind of logic-based returns | |
| CN107786992A (en) | A kind of method and apparatus for detecting mobile communication network quality | |
| CN109818782A (en) | The method that a kind of pair of server is classified | |
| Li et al. | Street-Level Landmarks Acquisition Based on SVM Classifiers. | |
| CN108462615A (en) | A kind of network user's group technology and device | |
| CN105159992A (en) | Method and device for detecting page contents and network behaviors of application program | |
| CN112449371B (en) | Performance evaluation method of wireless router and electronic equipment | |
| CN113382039A (en) | Application identification method and system based on 5G mobile network flow analysis | |
| CN108965011A (en) | One kind being based on intelligent gateway deep packet inspection system and analysis method | |
| CN103036746B (en) | Passive measurement method and passive measurement system of web page responding time based on network intermediate point | |
| CN107948015B (en) | A kind of Analysis on Quality of Service method, apparatus and network system | |
| CN108268370B (en) | Website quality analysis method, device and system based on Referer and template library matching | |
| CN113676926B (en) | User network sensing portrait method and device | |
| CN105530144B (en) | Business recognition method and system in asymmetric routed environment | |
| CN109922083B (en) | Network protocol flow control system | |
| Wang et al. | Look deep into the new deep network: a measurement study on the ZeroNet | |
| CN114760216B (en) | Method and device for determining scanning detection event and electronic equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20190528 |
|
| RJ01 | Rejection of invention patent application after publication |