CN116318839A - SD-WAN flow identification method, system and equipment based on DPI technology - Google Patents
SD-WAN flow identification method, system and equipment based on DPI technology Download PDFInfo
- Publication number
- CN116318839A CN116318839A CN202310076096.9A CN202310076096A CN116318839A CN 116318839 A CN116318839 A CN 116318839A CN 202310076096 A CN202310076096 A CN 202310076096A CN 116318839 A CN116318839 A CN 116318839A
- Authority
- CN
- China
- Prior art keywords
- data
- unit
- wan
- flow
- output end
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000005516 engineering process Methods 0.000 title claims abstract description 31
- 238000000034 method Methods 0.000 title claims abstract description 17
- 238000012545 processing Methods 0.000 claims abstract description 35
- 238000001514 detection method Methods 0.000 claims description 28
- 238000012216 screening Methods 0.000 claims description 26
- 230000005540 biological transmission Effects 0.000 claims description 15
- 238000001914 filtration Methods 0.000 claims description 12
- 238000012217 deletion Methods 0.000 claims description 8
- 230000037430 deletion Effects 0.000 claims description 8
- 238000013144 data compression Methods 0.000 claims description 7
- 238000007689 inspection Methods 0.000 abstract description 3
- 241000700605 Viruses Species 0.000 abstract description 2
- 230000009545 invasion Effects 0.000 abstract description 2
- 238000010586 diagram Methods 0.000 description 3
- 230000004075 alteration Effects 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000006870 function Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
- H04L63/1416—Event detection, e.g. attack signature detection
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
- H04L63/1425—Traffic logging, e.g. anomaly detection
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
- Y02D30/00—Reducing energy consumption in communication networks
- Y02D30/50—Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate
Abstract
The invention relates to the technical field of data processing, in particular to an SD-WAN traffic identification method, system and equipment based on DPI technology. The invention applies the deep packet inspection technology to the software defined wide area network, searches the data part of the data packet of the flow data to search the protocols, viruses, junk mails, invasions and the like which are not matched with the specifications in the process of carrying out flow identification, ensures the safety of the data in the flow under the function of realizing the accurate identification of the flow, improves the stability of the system in use, and simultaneously carries out denoising treatment on the graphic data in the data flow, thereby ensuring the accuracy of data identification and processing.
Description
Technical Field
The invention relates to the technical field of data processing, in particular to a SD-WAN flow identification method, system and equipment based on DPI technology.
Background
With the development of the era, network security is gradually paid attention to, and the streaming data can be identified by using an SD-WAN, namely a software defined wide area network, which is a service formed by applying SDN technology to a wide area network scene, and the service is used for connecting enterprise networks, data centers, internet applications and cloud services in a wide geographic range.
But only through the safety supervision of the SD-WAN to the industrial Internet, the data in the flow can not be completely and effectively identified and supervised, and certain safety disadvantages exist.
For this purpose, a method, a system and a device for identifying SD-WAN traffic based on DPI technology are provided.
Disclosure of Invention
The invention aims to provide a SD-WAN traffic identification method, system and equipment based on DPI technology, so as to solve the problems in the background technology.
In order to achieve the above purpose, the present invention provides the following technical solutions:
the SD-WAN flow identification system based on DPI technology comprises a data access unit, a data screening unit, a data processing unit, a log generation unit, a data transmission unit, a data receiving unit, a deep packet detection unit, a protocol matching unit, a data deleting unit, an SD-WAN control unit and a cloud server unit, wherein the data access unit receives external data, performs image denoising on received image information through a denoising algorithm arranged in the data access unit, screens flow through the data screening unit, screens the screened flow through the data processing unit, identifies the screened flow through the data processing unit, generates data log information through the log generation unit, compresses the data through the data processing unit in sequence, and directly transmits the processed data to the SD-WAN control unit through the data transmission unit
Preferably, the denoising algorithm specifically comprises:
where |vu (x) | is the gradient mean value of pixel x, 0 (x, y) is the gradient direction angle of pixel x, y, u (x) is the neighborhood gray average value of pixel x, σv, σ0, η1, η2 is the threshold control parameter.
Preferably, the data receiving unit is configured to receive the data generated by the data processing unit, match the data with the data by using the protocol matching unit, transmit the successfully matched data packet to the deep packet detection unit for detection, send the detection result and the data packet to the data deleting unit, delete the harmful data in the data deleting unit, and transmit the data after deleting the information to the SD-WAN control unit.
Preferably, the output end of the data access unit is connected with the input end of the data screening unit, the output end of the data screening unit is connected with the input end of the data processing unit, the output ends of the data processing unit are connected with the input ends of the log generating unit and the data transmission unit, the output end of the data transmission unit is connected with the input end of the SD-WAN control unit, the output end of the SD-WAN control unit is connected with the input end of the data receiving unit, the output end of the data receiving unit is connected with the output end of the deep packet detection unit, the output end of the deep packet detection unit is connected with the input end of the protocol matching unit, the output end of the protocol matching unit is connected with the input end of the data deleting unit, and the output end of the SD-WAN control unit is connected with the input end of the cloud service unit.
Preferably, the data screening unit includes a noise filtering module and a protocol identification module, the noise filtering module is used for filtering noise flow, and the protocol identification module is used for screening flow conforming to a protocol.
Preferably, the data processing unit includes a data compression module and a data classification module, where the data compression module and the data classification module classify the data and compress the classified data.
The SD-WAN flow identification method based on the DPI technology is suitable for the SD-WAN flow identification system based on the DPI technology, and specifically comprises the following steps:
s1, the data access unit receives external data, data screening of flow is carried out through the data screening unit, and the screened data flow is identified through the data processing unit;
s2, the processed data are directly transmitted to an SD-WAN control unit through a data transmission unit, and the SD-WAN control unit transmits the data to a data receiving unit;
s3, the data receiving unit is used for analyzing the data generated by the data processing unit, matching the data through the protocol matching unit, deleting the data which are failed to match, and transmitting the data packet which is successful to match to the deep packet detection unit;
and S4, the deep packet detection unit judges whether the content in the data transmitted by the protocol matching unit contains information in a threat feature library of the deep packet detection unit by adopting a deep packet detection algorithm, sends a detection result and a data packet to a data deletion unit, deletes the data packet containing the threat in the data deletion unit, and transmits the data which does not contain the threat to the SD-WAN control unit.
Preferably, the SD-WAN traffic recognition device based on DPI technology comprises:
at least one processor and a memory communicatively coupled to the at least one processor, the memory storing instructions executable by the at least one processor to enable the at least one processor to perform the method of using a DPI technology based SD-WAN traffic identification system according to any of claims 1-5.
Compared with the prior art, the invention has the beneficial effects that:
by applying the deep packet inspection technology to the software-defined wide area network, in the process of carrying out flow identification, the data part of the data packet of the flow data is searched for protocols, viruses, junk mails, invasions and the like which are not matched with the specifications, the safety of the data in the flow is ensured under the function of realizing the accurate identification of the flow, the stability of the system in use is improved, and meanwhile, the denoising processing of the graphic data in the data flow is ensured, so that the accuracy of the data identification and processing is ensured.
Drawings
FIG. 1 is a block diagram of an SD-WAN traffic recognition system based on DPI technology according to the present invention;
FIG. 2 is a block diagram of a data screening unit according to the present invention;
FIG. 3 is a block diagram of a data processing unit according to the present invention.
In the figure: 1. a data access unit; 2. a data screening unit; 3. a data processing unit; 4. a log generation unit; 5. a data transmission unit; 6. a data receiving unit; 7. a deep packet inspection unit; 8. a protocol matching unit; 9. a data deleting unit; 10. an SD-WAN control unit; 11. a cloud server unit; 12. a noise filtering module; 13. a protocol identification module; 14. a data compression module; 15. and a data classification module.
Detailed Description
The following description of the embodiments of the present invention will be made clearly and completely with reference to the accompanying drawings, in which it is apparent that the embodiments described are only some embodiments of the present invention, but not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
In the description of the present invention, it should be understood that the terms "center", "longitudinal", "lateral", "length", "width", "thickness", "upper", "lower", "front", "rear", "left", "right", "horizontal", "top", "bottom", "inner", "outer", "clockwise", "counterclockwise", etc. indicate orientations or positional relationships based on the orientations or positional relationships shown in the drawings are merely for convenience in describing the present invention and simplifying the description, and do not indicate or imply that the devices or elements referred to must have a specific orientation, be configured and operated in a specific orientation, and thus should not be construed as limiting the present invention.
Furthermore, the terms "first," "second," and the like, are used for descriptive purposes only and are not to be construed as indicating or implying a relative importance or implicitly indicating the number of technical features indicated. Thus, a feature defining "a first" or "a second" may explicitly or implicitly include one or more of the described features. In the description of the present invention, the meaning of "a plurality" is two or more, unless explicitly defined otherwise. Furthermore, the terms "mounted," "connected," "coupled," and "connected" are to be construed broadly, and may be, for example, fixedly connected, detachably connected, or integrally connected; can be mechanically or electrically connected; can be directly connected or indirectly connected through an intermediate medium, and can be communication between two elements. The specific meaning of the above terms in the present invention will be understood in specific cases by those of ordinary skill in the art.
Referring to fig. 1 to 3, the present invention provides a method, a system, and a device for identifying SD-WAN traffic based on DPI technology, and the technical scheme is as follows:
the SD-WAN flow identification system based on DPI technology comprises a data access unit 1, a data screening unit 2, a data processing unit 3, a log generation unit 4, a data transmission unit 5, a data receiving unit 6, a deep packet detection unit 7, a protocol matching unit 8, a data deletion unit 9, an SD-WAN control unit 10 and a cloud server unit 11, wherein the output end of the data access unit 1 is connected with the input end of the data screening unit 2, the output end of the data screening unit 2 is connected with the input end of the data processing unit 3, the output end of the data processing unit 3 is connected with the input end of the log generation unit 4 and the data transmission unit 5, the output end of the data transmission unit 5 is connected with the input end of the SD-WAN control unit 10, the output end of the SD-WAN control unit 10 is connected with the input end of the data receiving unit 6, the output end of the deep packet detection unit 7 is connected with the input end of the protocol matching unit 8, the output end of the protocol matching unit 8 is connected with the input end of the data deletion unit 9, and the output end of the SD-WAN control unit 10 is connected with the input end of the cloud server unit 10.
As an embodiment of the present invention, referring to fig. 1, a data access unit 1 receives external data, performs image denoising on received image information through a denoising algorithm set in the data access unit 1, performs flow screening through a data screening unit 2, identifies screened flow through a data processing unit 3, generates data log information by a log generating unit 4, then sequentially compresses the data through the data processing unit 3, finally directly transmits the processed data to an SD-WAN control unit 10 through a data transmitting unit 5, a data receiving unit 6 is used for receiving the data generated by the data processing unit 3, then performs matching through a protocol matching unit 8, transmits a successfully matched data packet to a deep packet detecting unit 7 for detection, and transmits a detection result and the data packet to a data deleting unit 9, deletes harmful data in the data deleting unit 9, and transmits the data after deleting the data log information to the SD-WAN control unit 10, and the SD-WAN control unit 10 can transmit flow data and working instructions.
As an embodiment of the present invention, referring to fig. 1, the denoising algorithm specifically includes:
where |vu (x) | is the gradient mean value of pixel x, 0 (x, y) is the gradient direction angle of pixel x, y, u (x) is the neighborhood gray average value of pixel x, σv, σ0, η1, η2 is the threshold control parameter.
As an embodiment of the present invention, referring to fig. 2 and 3, the data filtering unit 2 includes a noise filtering module 12 and a protocol identification module 13, the noise filtering module 12 is used for filtering noise traffic, the protocol identification module 13 is used for filtering traffic conforming to a protocol, the data processing unit 3 includes a data compression module 14 and a data classification module 15, and the data compression module 14 and the data classification module 15 classify data and compress the classified data.
The SD-WAN flow identification method based on the DPI technology is suitable for the SD-WAN flow identification system based on the DPI technology, and specifically comprises the following steps:
s1, the data access unit 1 receives external data, data screening of flow is carried out through the data screening unit 2, and the screened data flow is identified through the data processing unit 3;
s2, the processed data are directly transmitted to the SD-WAN control unit 10 through the data transmission unit 5, and the SD-WAN control unit 10 transmits the data to the data receiving unit 6;
s3, the data receiving unit 6 is used for analyzing the data generated by the data processing unit 3, matching the data through the protocol matching unit 8, deleting the data which are failed to match, and transmitting the data packet which is successful to match to the deep packet detection unit 7;
s4, the deep packet detection unit 7 judges whether the content in the data transmitted by the protocol matching unit 8 contains information in a threat feature library of the deep packet detection unit 7 by adopting a deep packet detection algorithm, and sends a detection result and the data packet to the data deletion unit 9, the data deletion unit 9 deletes the data packet containing the threat, and the data without the threat is transmitted to the SD-WAN control unit 10.
SD-WAN traffic identification device based on DPI technology, comprising:
at least one processor and a memory communicatively coupled to the at least one processor, the memory storing instructions executable by the at least one processor to enable the at least one processor to perform the method of using the DPI technology based SD-WAN traffic identification system of any of claims 1-5.
Although embodiments of the present invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made therein without departing from the principles and spirit of the invention, the scope of which is defined in the appended claims and their equivalents.
Claims (8)
1. SD-WAN flow identification system based on DPI technique, its characterized in that: the system comprises a data access unit (1), a data screening unit (2), a data processing unit (3), a log generation unit (4), a data transmission unit (5), a data receiving unit (6), a deep packet detection unit (7), a protocol matching unit (8), a data deleting unit (9), an SD-WAN control unit (10) and a cloud server unit (11);
the data access unit (1) receives external data, performs image denoising on the received image information through a denoising algorithm arranged in the data access unit (1), performs flow screening through the data screening unit (2), identifies the screened flow through the data processing unit (3), generates data log information through the log generation unit (4), compresses the data sequentially through the data processing unit (3), and finally directly transmits the processed data to the SD-WAN control unit (10) through the data transmission unit (5).
2. The SD-WAN traffic recognition system based on DPI technology according to claim 1, wherein: the denoising algorithm specifically comprises the following steps:
where |vu (x) | is the gradient mean value of pixel x, 0 (x, y) is the gradient direction angle of pixel x, y, u (x) is the neighborhood gray average value of pixel x, σv, σ0, η1, η2 is the threshold control parameter.
3. The SD-WAN traffic system based on DPI technology according to claim 1, wherein: the data receiving unit (6) is used for receiving the data generated by the data processing unit (3), then matching the data through the protocol matching unit (8), transmitting the successfully matched data packet to the deep packet detection unit (7) for detection, transmitting the detection result and the data packet to the data deleting unit (9), deleting harmful data in the data deleting unit (9), and transmitting the data after deleting information to the SD-WAN control unit (10).
4. The SD-WAN traffic recognition system based on DPI technology according to claim 1, wherein: the output end of the data access unit (1) is connected with the input end of the data screening unit (2), the output end of the data screening unit (2) is connected with the input end of the data processing unit (3), the output ends of the data processing unit (3) are connected with the input ends of the log generating unit (4) and the data transmission unit (5), the output end of the data transmission unit (5) is connected with the input end of the SD-WAN control unit (10), the output end of the SD-WAN control unit (10) is connected with the input end of the data receiving unit (6), the output end of the data receiving unit (6) is connected with the output end of the deep packet detecting unit (7), the output end of the deep packet detecting unit (7) is connected with the input end of the protocol matching unit (8), the output end of the protocol matching unit (8) is connected with the input end of the data deleting unit (9), the output end of the data deleting unit (9) is connected with the input end of the SD-WAN control unit (10), and the output end of the SD-WAN control unit (10) is connected with the input end of the cloud end () service unit.
5. The SD-WAN traffic recognition system based on DPI technology according to claim 1, wherein: the data screening unit (2) comprises a noise filtering module (12) and a protocol identification module (13), wherein the noise filtering module (12) is used for filtering noise flow, and the protocol identification module (13) is used for screening flow conforming to a protocol.
6. The SD-WAN traffic recognition system based on DPI technology according to claim 1, wherein: the data processing unit (3) comprises a data compression module (14) and a data classification module (15), and the data compression module (14) and the data classification module (15) classify data and compress the classified data.
7. A method for identifying SD-WAN traffic based on DPI technology, which is applicable to the SD-WAN traffic identification system based on DPI technology according to any one of claims 1 to 6, and is characterized in that: the method specifically comprises the following steps:
s1, a data access unit (1) receives external data, data screening of flow is carried out through a data screening unit (2), and screened data flow is identified through a data processing unit (3);
s2, the processed data are directly transmitted to an SD-WAN control unit (10) through a data transmission unit (5), and the SD-WAN control unit (10) transmits the data to a data receiving unit (6);
s3, the data receiving unit (6) is used for analyzing the data generated by the data processing unit (3), matching the data through the protocol matching unit (8), deleting the data which are failed to match, and transmitting the data packet which is successful to the deep packet detection unit (7);
s4, the deep packet detection unit (7) judges whether the content in the data transmitted by the protocol matching unit (8) contains information in a threat feature library by adopting a deep packet detection algorithm, and sends a detection result and the data packet to the data deletion unit (9), the data deletion unit (9) deletes the data packet containing the threat, and the data which does not contain the threat is transmitted to the SD-WAN control unit (10).
8. SD-WAN traffic identification device based on DPI technology, comprising:
at least one processor and a memory communicatively coupled to the at least one processor, the memory storing instructions executable by the at least one processor to enable the at least one processor to perform the method of using a DPI technology based SD-WAN traffic identification system according to any of claims 1-5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310076096.9A CN116318839A (en) | 2023-02-07 | 2023-02-07 | SD-WAN flow identification method, system and equipment based on DPI technology |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310076096.9A CN116318839A (en) | 2023-02-07 | 2023-02-07 | SD-WAN flow identification method, system and equipment based on DPI technology |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN116318839A true CN116318839A (en) | 2023-06-23 |
Family
ID=86829570
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202310076096.9A Pending CN116318839A (en) | 2023-02-07 | 2023-02-07 | SD-WAN flow identification method, system and equipment based on DPI technology |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116318839A (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1505804A (en) * | 2001-04-19 | 2004-06-16 | ��ʽ���綫֥ | Image processing method and image processing device |
| US20200296011A1 (en) * | 2019-03-14 | 2020-09-17 | Juniper Networks, Inc. | Satisfying service level agreement metrics for unknown applications |
| CN113904866A (en) * | 2021-10-29 | 2022-01-07 | 中国电信股份有限公司 | Secure (SD) -Wide Area Network (WAN) traffic handling and drainage method, device, system and medium |
| CN114531263A (en) * | 2020-10-30 | 2022-05-24 | 帕洛阿尔托网络公司 | Streaming metadata exchange between a network and a security function of a security service |
| CN115361334A (en) * | 2022-10-19 | 2022-11-18 | 深圳市光联世纪信息科技有限公司 | SD-WAN traffic identification method based on deep packet inspection technology |
-
2023
- 2023-02-07 CN CN202310076096.9A patent/CN116318839A/en active Pending
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1505804A (en) * | 2001-04-19 | 2004-06-16 | ��ʽ���綫֥ | Image processing method and image processing device |
| US20200296011A1 (en) * | 2019-03-14 | 2020-09-17 | Juniper Networks, Inc. | Satisfying service level agreement metrics for unknown applications |
| CN111770028A (en) * | 2019-03-14 | 2020-10-13 | 瞻博网络公司 | Method and network device for computer network |
| CN114531263A (en) * | 2020-10-30 | 2022-05-24 | 帕洛阿尔托网络公司 | Streaming metadata exchange between a network and a security function of a security service |
| CN113904866A (en) * | 2021-10-29 | 2022-01-07 | 中国电信股份有限公司 | Secure (SD) -Wide Area Network (WAN) traffic handling and drainage method, device, system and medium |
| CN115361334A (en) * | 2022-10-19 | 2022-11-18 | 深圳市光联世纪信息科技有限公司 | SD-WAN traffic identification method based on deep packet inspection technology |
Non-Patent Citations (1)
| Title |
|---|
| 许俊玲等: "基于邻域相似性的快速非局部滤波算法", 《商丘职业技术学院学报》, vol. 8, no. 5, pages 56 - 57 * |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9537826B2 (en) | Systems and methods for passing network traffic content | |
| US8693348B1 (en) | Systems and methods for content type classification | |
| US10218598B2 (en) | Automatic parsing of binary-based application protocols using network traffic | |
| US8483056B2 (en) | Analysis apparatus and method for abnormal network traffic | |
| CN111277587A (en) | Malicious encrypted traffic detection method and system based on behavior analysis | |
| CN111277570A (en) | Data security monitoring method and device, electronic equipment and readable medium | |
| US20060212942A1 (en) | Semantically-aware network intrusion signature generator | |
| CN113364752B (en) | Flow abnormity detection method, detection equipment and computer readable storage medium | |
| CN111935170A (en) | Network abnormal flow detection method, device and equipment | |
| CN112953971B (en) | Network security flow intrusion detection method and system | |
| EP4044546A1 (en) | Message processing method, device and apparatus as well as computer readable storage medium | |
| CN111931188B (en) | Vulnerability testing method and system in login scene | |
| CN115632878B (en) | Data transmission method, device, equipment and storage medium based on network isolation | |
| CN111885106A (en) | Internet of things safety management and control method and system based on terminal equipment characteristic information | |
| CN105635170A (en) | Method and device for identifying network data packet based on rules | |
| US20060036728A1 (en) | Systems and methods for categorizing network traffic content | |
| US11050771B2 (en) | Information processing apparatus, communication inspecting method and medium | |
| CN113727348B (en) | Method, device, system and storage medium for detecting user data of User Equipment (UE) | |
| CN116318839A (en) | SD-WAN flow identification method, system and equipment based on DPI technology | |
| CN115314322A (en) | Vulnerability detection confirmation method, device, equipment and storage medium based on flow | |
| CN110574348B (en) | Data processing apparatus and method | |
| CN116132096A (en) | Analysis system and method based on large-scale container safety data detection and protection | |
| CN112100257A (en) | Data processing method, data processing device, computer equipment and storage medium | |
| JP2016127394A (en) | Information processing device, method and program | |
| CN115766204B (en) | Dynamic IP equipment identification system and method for encrypted traffic |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |