CN110166447A - A kind of application identification system and its recognition methods based on PON gateway - Google Patents
A kind of application identification system and its recognition methods based on PON gateway Download PDFInfo
- Publication number
- CN110166447A CN110166447A CN201910408243.1A CN201910408243A CN110166447A CN 110166447 A CN110166447 A CN 110166447A CN 201910408243 A CN201910408243 A CN 201910408243A CN 110166447 A CN110166447 A CN 110166447A
- Authority
- CN
- China
- Prior art keywords
- matrix
- identification
- data
- recognition
- module
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/22—Parsing or analysis of headers
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04Q—SELECTING
- H04Q11/00—Selecting arrangements for multiplex systems
- H04Q11/0001—Selecting arrangements for multiplex systems using optical switching
- H04Q11/0062—Network aspects
- H04Q11/0067—Provisions for optical access or distribution networks, e.g. Gigabit Ethernet Passive Optical Network (GE-PON), ATM-based Passive Optical Network (A-PON), PON-Ring
Abstract
The invention discloses a kind of application identification systems based on PON gateway, including packet parsing module, for parsing to message；Recognition rule establishes module, for establishing recognition rule according to message result；Identification module carries out once application identification using recognition rule；Recognition result analysis module for analyzing a recognition result, and is modified recognition rule；Secondary identification module carries out secondary application identification according to revised recognition rule；Database module is stored for the data to identification process.The present invention can improve the deficiencies in the prior art, reduce the resource consumption of user side.
Description
Technical field
The present invention relates to Internet technical field, especially a kind of application identification system and its identification based on PON gateway
Method.
Background technique
With the development of optical fiber technology, PON network relies on the advantage of its equipment funds less investment early period, becomes users
The major way of optical fiber access.But since PON network is directly to be sent to signal in the form of broadcasting interchanger
All users, this results in the data handling procedure of user side complex.
Summary of the invention
The technical problem to be solved in the present invention is to provide a kind of application identification system based on PON gateway and its identification sides
Method is able to solve the deficiencies in the prior art, reduces the resource consumption of user side.
In order to solve the above technical problems, the technical solution used in the present invention is as follows.
A kind of application identification system based on PON gateway, including,
Packet parsing module, for being parsed to message；
Recognition rule establishes module, for establishing recognition rule according to message result；
Identification module carries out once application identification using recognition rule；
Recognition result analysis module for analyzing a recognition result, and is modified recognition rule；
Secondary identification module carries out secondary application identification according to revised recognition rule；
Database module is stored for the data to identification process.
A kind of recognition methods of the above-mentioned application identification system based on PON gateway, comprising the following steps:
A, packet parsing module parses message, obtain home address, external address, source port, destination port, using class
Type and data format are stored in database module；
B, the packet parsing historical results that recognition rule establishes that module stores database module carry out and and with screening, then root
Recognition rule is established according to the selection result；
C, an identification module carries out once application identification using recognition rule, and recognition result is stored in database module；
D, recognition result analysis module analyzes a recognition result, obtains identification deviation data and repeats identification data；
Then recognition rule is modified according to identification deviation data and repetition identification data；
E, secondary identification module is recognized according to the correction result of recognition rule, and recognition result is stored in database mould
Block.
Preferably, establish recognition rule in step B and include the following steps,
B1, home address matrix, external address matrix, source port matrix, destination port matrix are established respectively according to parsing result,
And the relationship maps set of application type and data format；
B2, respectively by relevant portion linear in home address matrix, external address matrix, source port matrix and destination port matrix
Divide and replaced with null matrix, then internal address matrix, external address matrix, source port matrix and destination port matrix are dropped
Dimension processing, most using dimension after home address matrix, external address matrix, source port matrix and destination port matrix dimension-reduction treatment
Few matrix is merged with the relationship maps of corresponding application type and data format in relationship maps set；
B3, the data acquisition system after merging is subjected to duplicate removal processing, then establishes recognition rule.
Preferably, in step B3, when home address, external address, source port, destination port, application type and data
When format is identical, it is determined as repeated data；Or home address and external address are in the cyclical-transformation of same period, and apply
When type is identical with data format, it is determined as repeated data；Or source port and destination port keep identical one-to-one relationship,
It is determined as repeated data.
Preferably, recognition rule is modified and is included the following steps in step D,
D1, identification deviation data matrix is established respectively and repeats identification data matrix, and identification deviation data and real data
Between mapping function；
D2, by identify deviation data matrix respectively with after dimensionality reduction home address matrix, external address matrix, source port matrix and
Destination port matrix compares, if it exists matrix similar with identification deviation data matrix, then this matrix is inclined according to identification
Mapping function between difference data and real data is modified this matrix；
D3, identification data matrix and home address matrix, external address matrix, source port matrix and the purpose after dimensionality reduction will be repeated
Port matrix compares, and matrix similar with identification data matrix is repeated, then add corresponding heavy in step B3 if it exists
Complex data criterion；
D4, step B is repeated, establishes revised recognition rule.
Preferably, on the basis of once applying recognition result, carrying out secondary application identification in step E.
Brought beneficial effect is by adopting the above technical scheme: the present invention by application message identification twice,
It avoids single and identifies a large amount of repetitive operations for guaranteeing recognition accuracy and carrying out.In recognition rule establishment process, lead to
The dimensionality reduction to packet parsing result and merging are crossed, useless and duplicate data information is deleted, simplifies recognition rule.Second of knowledge
The amendment for not carrying out rule on the basis of identifying first time, to effectively improve the accuracy of final recognition result.Using going through
The deviation and repeated data of history data and first time recognition result, effectively correct first time recognition rule, then
It is recognized on the basis of recognition result, identifying as a result, reducing by second for identification for the first time can be efficiently used
Operand.
Detailed description of the invention
Fig. 1 is the schematic diagram of a specific embodiment of the invention.
In figure: 1, packet parsing module；2, recognition rule establishes module；3, an identification module；4, recognition result is analyzed
Module；5, secondary identification module；6, database module.
Specific embodiment
Referring to Fig.1, a specific embodiment of the invention includes,
Packet parsing module 1, for being parsed to message；
Recognition rule establishes module 2, for establishing recognition rule according to message result；
Identification module 3 carries out once application identification using recognition rule；
Recognition result analysis module 4 for analyzing a recognition result, and is modified recognition rule；
Secondary identification module 5 carries out secondary application identification according to revised recognition rule；
Database module 6 is stored for the data to identification process.
A kind of recognition methods of the above-mentioned application identification system based on PON gateway, comprising the following steps:
A, packet parsing module 1 parses message, obtains home address, external address, source port, destination port, application
Type and data format are stored in database module 6；
B, the packet parsing historical results that recognition rule establishes that module 2 stores database module 6 carry out and and with screening, then
Recognition rule is established according to the selection result；
C, an identification module 3 carries out once application identification using recognition rule, and recognition result is stored in database module 6；
D, recognition result analysis module 4 analyzes a recognition result, obtains identification deviation data and repeats identification data；
Then recognition rule is modified according to identification deviation data and repetition identification data；
E, secondary identification module 5 is recognized according to the correction result of recognition rule, and recognition result is stored in database mould
Block 6.
In step B, establishes recognition rule and includes the following steps,
B1, home address matrix, external address matrix, source port matrix, destination port matrix are established respectively according to parsing result,
And the relationship maps set of application type and data format；
B2, respectively by relevant portion linear in home address matrix, external address matrix, source port matrix and destination port matrix
Divide and replaced with null matrix, then internal address matrix, external address matrix, source port matrix and destination port matrix are dropped
Dimension processing, most using dimension after home address matrix, external address matrix, source port matrix and destination port matrix dimension-reduction treatment
Few matrix is merged with the relationship maps of corresponding application type and data format in relationship maps set；
B3, the data acquisition system after merging is subjected to duplicate removal processing, then establishes recognition rule.
In step B3, when home address, external address, source port, destination port, application type and the complete phase of data format
Meanwhile being determined as repeated data；Or home address and external address are in the cyclical-transformation of same period, and application type and data
When format is identical, it is determined as repeated data；Or source port and destination port keep identical one-to-one relationship, are judged to repeating
Data.
In step D, recognition rule is modified and is included the following steps,
D1, identification deviation data matrix is established respectively and repeats identification data matrix, and identification deviation data and real data
Between mapping function；
D2, by identify deviation data matrix respectively with after dimensionality reduction home address matrix, external address matrix, source port matrix and
Destination port matrix compares, if it exists matrix similar with identification deviation data matrix, then this matrix is inclined according to identification
Mapping function between difference data and real data is modified this matrix；
D3, identification data matrix and home address matrix, external address matrix, source port matrix and the purpose after dimensionality reduction will be repeated
Port matrix compares, and matrix similar with identification data matrix is repeated, then add corresponding heavy in step B3 if it exists
Complex data criterion；
D4, step B is repeated, establishes revised recognition rule.
In step E, on the basis of once applying recognition result, secondary application identification is carried out.
Specifically, will once be applied according to the amendment to recognition rule and once using the relevance height of recognition result
Recognition result is divided into low associated section and high associated section；Secondary application identification is carried out to high associated section first, is then used
Low associated section is directly corrected in difference to the secondary recognition result of high associated section and a recognition result, without
It is recognized.In this way the operation of secondary identification can be reduced to the full extent guaranteeing the colleague of secondary recognition accuracy
Amount.
In the description of the present invention, it is to be understood that, term " longitudinal direction ", " transverse direction ", "upper", "lower", "front", "rear",
The orientation or positional relationship of the instructions such as "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outside" is based on attached drawing institute
The orientation or positional relationship shown is merely for convenience of the description present invention, rather than the device or element of indication or suggestion meaning must
There must be specific orientation, be constructed and operated in a specific orientation, therefore be not considered as limiting the invention.
The above shows and describes the basic principles and main features of the present invention and the advantages of the present invention.The technology of the industry
Personnel are it should be appreciated that the present invention is not limited to the above embodiments, and the above embodiments and description only describe this
The principle of invention, without departing from the spirit and scope of the present invention, various changes and improvements may be made to the invention, these changes
Change and improvement all fall within the protetion scope of the claimed invention.The claimed scope of the invention by appended claims and its
Equivalent thereof.
Claims (6)
1. a kind of application identification system based on PON gateway, it is characterised in that: including,
Packet parsing module (1), for being parsed to message；
Recognition rule establishes module (2), for establishing recognition rule according to message result；
Identification module (3) carries out once application identification using recognition rule；
Recognition result analysis module (4) for analyzing a recognition result, and is modified recognition rule；
Secondary identification module (5) carries out secondary application identification according to revised recognition rule；
Database module (6), stores for the data to identification process.
2. a kind of recognition methods of the application identification system described in claim 1 based on PON gateway, it is characterised in that including with
Lower step:
A, packet parsing module (1) parses message, obtains home address, external address, source port, destination port, answers
With type and data format, it is stored in database module (6)；
B, the packet parsing historical results that recognition rule establishes that module (2) stores database module (6) carry out and and with screening,
Then recognition rule is established according to the selection result；
C, an identification module (3) carries out once application identification using recognition rule, and recognition result is stored in database module
(6)；
D, recognition result analysis module (4) analyzes a recognition result, obtains identification deviation data and repeats identification number
According to；Then recognition rule is modified according to identification deviation data and repetition identification data；
E, secondary identification module (5) is recognized according to the correction result of recognition rule, and recognition result is stored in database
Module (6).
3. the recognition methods of the application identification system according to claim 2 based on PON gateway, it is characterised in that: step B
In, it establishes recognition rule and includes the following steps,
B1, home address matrix, external address matrix, source port matrix, destination port matrix are established respectively according to parsing result,
And the relationship maps set of application type and data format；
B2, respectively by relevant portion linear in home address matrix, external address matrix, source port matrix and destination port matrix
Divide and replaced with null matrix, then internal address matrix, external address matrix, source port matrix and destination port matrix are dropped
Dimension processing, most using dimension after home address matrix, external address matrix, source port matrix and destination port matrix dimension-reduction treatment
Few matrix is merged with the relationship maps of corresponding application type and data format in relationship maps set；
B3, the data acquisition system after merging is subjected to duplicate removal processing, then establishes recognition rule.
4. the recognition methods of the application identification system according to claim 3 based on PON gateway, it is characterised in that: step
In B3, when home address, external address, source port, destination port, application type are identical with data format, it is determined as
Repeated data；Or home address and external address are in the cyclical-transformation of same period, and when application type is identical with data format,
It is determined as repeated data；Or source port and destination port keep identical one-to-one relationship, are determined as repeated data.
5. the recognition methods of the application identification system according to claim 4 based on PON gateway, it is characterised in that: step D
In, recognition rule is modified and is included the following steps,
D1, identification deviation data matrix is established respectively and repeats identification data matrix, and identification deviation data and real data
Between mapping function；
D2, by identify deviation data matrix respectively with after dimensionality reduction home address matrix, external address matrix, source port matrix and
Destination port matrix compares, if it exists matrix similar with identification deviation data matrix, then this matrix is inclined according to identification
Mapping function between difference data and real data is modified this matrix；
D3, identification data matrix and home address matrix, external address matrix, source port matrix and the purpose after dimensionality reduction will be repeated
Port matrix compares, and matrix similar with identification data matrix is repeated, then add corresponding heavy in step B3 if it exists
Complex data criterion；
D4, step B is repeated, establishes revised recognition rule.
6. the recognition methods of the application identification system according to claim 5 based on PON gateway, it is characterised in that: step E
In, on the basis of once applying recognition result, carry out secondary application identification.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910408243.1A CN110166447B (en) | 2019-05-16 | 2019-05-16 | PON gateway-based application identification system and identification method thereof |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910408243.1A CN110166447B (en) | 2019-05-16 | 2019-05-16 | PON gateway-based application identification system and identification method thereof |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN110166447A true CN110166447A (en) | 2019-08-23 |
| CN110166447B CN110166447B (en) | 2021-11-12 |
Family
ID=67631007
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910408243.1A Expired - Fee Related CN110166447B (en) | 2019-05-16 | 2019-05-16 | PON gateway-based application identification system and identification method thereof |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110166447B (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20110258209A1 (en) * | 2010-04-15 | 2011-10-20 | Computer Associates Think, Inc. | Rule organization for efficient transaction pattern matching |
| CN102340532A (en) * | 2010-07-26 | 2012-02-01 | 北京启明星辰信息技术股份有限公司 | P2P application identification method and device as well as P2P flow management method and device |
| CN103873356A (en) * | 2012-12-11 | 2014-06-18 | 中国电信股份有限公司 | Household gateway based application identification method and system, and household gateway |
| CN104243237A (en) * | 2014-09-17 | 2014-12-24 | 杭州华三通信技术有限公司 | P2P flow detection method and device |
| CN106506526A (en) * | 2016-11-30 | 2017-03-15 | 东软集团股份有限公司 | A kind of verification method of application recognition result and system |
| CN107070745A (en) * | 2017-03-31 | 2017-08-18 | 武汉绿色网络信息服务有限责任公司 | Unknown flow rate analysis method caused by a kind of rule is omitted |
-
2019
- 2019-05-16 CN CN201910408243.1A patent/CN110166447B/en not_active Expired - Fee Related
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20110258209A1 (en) * | 2010-04-15 | 2011-10-20 | Computer Associates Think, Inc. | Rule organization for efficient transaction pattern matching |
| CN102340532A (en) * | 2010-07-26 | 2012-02-01 | 北京启明星辰信息技术股份有限公司 | P2P application identification method and device as well as P2P flow management method and device |
| CN103873356A (en) * | 2012-12-11 | 2014-06-18 | 中国电信股份有限公司 | Household gateway based application identification method and system, and household gateway |
| CN104243237A (en) * | 2014-09-17 | 2014-12-24 | 杭州华三通信技术有限公司 | P2P flow detection method and device |
| CN106506526A (en) * | 2016-11-30 | 2017-03-15 | 东软集团股份有限公司 | A kind of verification method of application recognition result and system |
| CN107070745A (en) * | 2017-03-31 | 2017-08-18 | 武汉绿色网络信息服务有限责任公司 | Unknown flow rate analysis method caused by a kind of rule is omitted |
Also Published As
| Publication number | Publication date |
|---|---|
| CN110166447B (en) | 2021-11-12 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP4659877B2 (en) | Stream data processing control method, stream data processing apparatus, and stream data processing control program | |
| CN113378671A (en) | Deep learning-based PID (proportion integration differentiation) drawing analysis method, computer system and medium | |
| CN105653900A (en) | Reference-genome-free transcriptome analysis system and reference-genome-free transcriptome analysis method | |
| CN110880021B (en) | Model-assisted data annotation system and annotation method | |
| CN111698207A (en) | Method, equipment and storage medium for generating knowledge graph of network information security | |
| CN112860727A (en) | Data query method, device, equipment and medium based on big data query engine | |
| CN104424399B (en) | A kind of method, apparatus of the knowledge navigation based on virus protein body | |
| US20220129447A1 (en) | Method, system, device and medium for querying product history | |
| CN104462322B (en) | Character string comparison method and device | |
| CN113850075A (en) | Method, system, device and medium for standardizing medical information data project names | |
| CN110166447A (en) | A kind of application identification system and its recognition methods based on PON gateway | |
| CN113536770A (en) | Text analysis method, device and equipment based on artificial intelligence and storage medium | |
| CN105574019B (en) | Query parameter processing method and device | |
| CN111752980B (en) | Intelligent early warning system and method for law enforcement supervision | |
| CN115205032A (en) | Credit investigation query method, apparatus, device and storage medium | |
| CN106991166A (en) | A kind of big data processing method and processing device | |
| CN113001538B (en) | Command analysis method and system | |
| CN103631951A (en) | Batch access function merging method and device based on metadata | |
| CN114416895A (en) | Map data processing method and device, electronic equipment and storage medium | |
| CN106682107A (en) | Method and device for determining database table incidence relation | |
| CN105930453A (en) | Repeatability analyzing method and device | |
| CN109902215A (en) | A kind of method and system of deals match | |
| CN109326330A (en) | The production method of analysis of biological information tool, device and can storage medium | |
| CN117114249B (en) | Task planning and response system based on language model | |
| CN112287005B (en) | Data processing method, device, server and medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB03 | Change of inventor or designer information |
Inventor after: Lu Liyu Inventor after: Chen Wendi Inventor after: Huang Huang Inventor after: Ji Tielei Inventor before: Ji Tielei |
|
| CB03 | Change of inventor or designer information | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20211026 Address after: No. 6 Democracy Road, Xingning District, Nanning City, Guangxi Zhuang Autonomous Region, 530000 Applicant after: GUANGXI POWER GRID Co.,Ltd. Address before: 125001 shaheying village, shaheying Township, Lianshan District, Huludao City, Liaoning Province Applicant before: Ji Tielei |
|
| TA01 | Transfer of patent application right | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20211112 |
|
| CF01 | Termination of patent right due to non-payment of annual fee |