作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2012, Vol. 38 ›› Issue (16): 182-184. doi: 10.3969/j.issn.1000-3428.2012.16.047

• 人工智能及识别技术 • 上一篇    下一篇

基于流量与行为特征的P2P流量识别模型

邬书跃1,2,余 杰3,樊晓平1   

  1. (1. 中南大学信息科学与工程学院,长沙 410083;2. 湖南涉外经济学院电气与信息工程学院,长沙 410205;3. 国防科学技术大学计算机学院,长沙 410073)
  • 收稿日期:2011-10-20 出版日期:2012-08-20 发布日期:2012-08-17
  • 作者简介:邬书跃(1963-),男,教授,主研方向:网络安全,移动通信;余 杰,博士;樊晓平,教授、博士、博士生导师
  • 基金资助:
    国家“863”计划基金资助项目(2009AA01Z431);国家自然科学基金资助项目(61103015);湖南省自然科学基金资助项目(09JJ5043)

P2P Traffic Identification Model Based on Traffic and Behavior Feature

WU Shu-yue 1,2, YU Jie 3, FAN Xiao-ping 1   

  1. (1. School of Information Science and Engineering, Central South University, Changsha 410083, China; 2. School of Electrical and Information Engineering, University of Hunan International Economics, Changsha 410205, China; 3. Institute of Computers, National University of Defense Technology, Changsha 410073, China)
  • Received:2011-10-20 Online:2012-08-20 Published:2012-08-17

摘要: 针对点对点(P2P)用户习惯、运行环境的异构性,提出P2P流量识别的双层模型。该模型由单流内部流量特征的贝叶斯网络识别算法与多流之间行为特征的支持向量机识别算法组成。实验结果表明,相对于统计特征识别方法,该模型检测准确度提高5.4%,且对于不同应用场景具有较好的稳定性。

关键词: 流量识别, 点对点, 双层模型, 贝叶斯网络, 支持向量机, 行为特征

Abstract: Considering the heterogeneity of Peer-to-Peer(P2P) users habit and runtime environment, this paper proposes a two-layered model of P2P traffic identification to identify and filter the P2P traffic. It combines both an identification algorithm of Bayesian network based on single traffic feature method and an identification algorithm of Support Vector Machine(SVM) based on multi-traffic behavior method. Experimental results show that the method is 5.4% more accurate than the statistical feature identify method, and it has better stability in different application scenes.

Key words: traffic identification, Peer-to-Peer(P2P), two-layered model, Bayesian network, Support Vector Machine(SVM), behavior feature

中图分类号: