基于TextRank算法的未知网络协议帧定位方法

doi:10.19678/j.issn.1000-3428.0055421

摘要/Abstract

摘要： 针对未知网络环境下比特流形式的通信数据难以进行帧定界的问题，提出一种基于TextRank算法的帧定位方法。通过统计数据中的序列出现频率获得比特流中的节点权重，利用基于TextRank的BitstreamRank算法确定未知协议数据中的关键序列，并根据关键序列对比特流进行切分并计算得到各段比特流间的序列相似度，从而定位未知协议数据的帧头位置。仿真结果表明，该方法能实现未知网络协议数据的快速分析，准确定位出比特流数据中各帧的位置，并且帧定位准确率高于90%。

关键词: 帧定位, TextRank算法, 序列统计, 序列相似度, 模式匹配

Abstract: In order to solve the difficulty of frame delimitation of communication data in the form of bit stream in unknown network environment,this paper proposes a frame location method based on TextRank algorithm.The weight of nodes in bit stream is determined based on the occurrence frequency of sequence in data.Then the TextRank-based BitstreamRank algorithm is used to determine the key sequence in the data of unknown protocol,and based on key sequence,the bit stream is segmented to calculate the sequence similarity between segments of bit stream.Thus the frame head of unknown protocol data can be located.Simulation results show that the proposed method can quickly and effectively analyze the unknown network protocol data,and accurately locate the position of each frame in bit stream data at an accuracy of over 90%.

Key words: frame location, TextRank algorithm, sequence statistics, sequence similarity, pattern matching

中图分类号:

TP393

刘治国, 宋广跃, 蔡文珠, 刘庆利. 基于TextRank算法的未知网络协议帧定位方法[J]. 计算机工程, 2020, 46(7): 179-184.

LIU Zhiguo, SONG Guangyue, CAI Wenzhu, LIU Qingli. Frame Location Method of Unknown Network Protocol Based on TextRank Algorithm[J]. Computer Engineering, 2020, 46(7): 179-184.

https://www.ecice06.com/CN/Y2020/V46/I7/179

参考文献

[1] WANG Hezhou.Research on bit-stream oriented link protocol identification and analysis techniques[D].Hefei:University of Science and Technology of China,2014.(in Chinese)王和洲.面向比特流的链路协议识别与分析技术[D].合肥:中国科学技术大学,2014.
[2] CAI Le,SHI Rong,XU Du.Communication protocol identification based on data mining and automatic reasoning[C]//Proceedings of the 2nd International Conference on Big Data Analysis.Washington D.C.,USA:IEEE Press,2017:211-216.
[3] ZHOU Hongchuan.Classification of bit-stream unknown protocol[D].Chengdu:University of Electronic Science and Technology of China,2016.(in Chinese)周洪川.面向比特流的未知协议分类研究[D].成都:电子科技大学,2016.
[4] CAI Le.Research on frame-based communication protocol recognition technology[D].Chengdu:University of Electronic Science and Technology of China,2017.(in Chinese)蔡乐.基于帧的通信协议识别技术的研究[D].成都:电子科技大学,2017.
[5] CAO Chenghong,LEI Yingke.Survey of bit-stream oriented link-layer unknown frame analysis techniques[J].Journal of Chinese Computer Systems,2018,39(2):297-303.(in Chinese)曹成宏,雷迎科.面向比特流的链路层未知帧分析技术综述[J].小型微型计算机系统,2018,39(2):297-303.
[6] WANG Hezhou,XUE Kaiping,HONG Peilin,et al.An unknown link protocol bit stream segmentation algorithm based on frequent statistics and association rules[J].Journal of University of Science and Technology of China,2013,43(7):554-560.(in Chinese)王和洲,薛开平,洪佩琳,等.基于频繁统计和关联规则的未知链路协议比特流切割算法[J].中国科学技术大学学报,2013,43(7):554-560.
[7] JU Yujian,XIE Shaobin,ZHANG Wei.Research and simulation of optimization process for network protocol frame segmentation[J].Computer Simulation,2015,32(1):318-321.(in Chinese)琚玉建,谢绍斌,张薇.网络协议帧切分优化过程研究与仿真[J].计算机仿真,2015,32(1):318-321.
[8] JIN Ling,QIU Weidong,YANG Xiaoniu,et al.Bitstream-oriented frequent pattern sequence mining algorithm[J].China Information Security,2011,9(6):95-97,101.(in Chinese)金凌,邱卫东,杨小牛,等.面向比特流的频繁模式序列挖掘算法[J].信息安全与通信保密,2011,9(6):95-97,101.
[9] LI Fen,LI Tong,ZHANG Chunrui,et al.Length identification of unknown data frame[C]//Proceedings of the 8th International Conference on Computational Intelligence and Security.Washington D.C.,USA:IEEE Press,2012:674-677.
[10] XUE Kaiping,LIU Bin,WANG Jinsong,et al.Data link bit stream oriented association analysis on unknown frame[J].Journal of Electronics and Information Technology,2017,39(2):374-380.(in Chinese)薛开平,柳彬,王劲松,等.面向链路比特流的未知帧关联分析[J].电子与信息学报,2017,39(2):374-380.
[11] ZHANG Junjiao.Calderon technique based integral equation methods in computational electromagnetics[D].Chengdu:University of Electronic Science and Technology of China,2016.(in Chinese)张俊娇.比特流协议分析与特征识别技术研究[D].成都:电子科技大学,2016.
[12] SONG Jiang.Research on discovery of unknown protocol in wireless network environment[D].Chengdu:University of Electronic Science and Technology of China,2013.(in Chinese)宋疆.无线网络环境下未知协议发现探索研究[D].成都:电子科技大学,2013.
[13] SHAO Zuozhi,YAN Yue,MIN Yunlang.The research of protocol identification based on traffic analysis[C]//Proceedings of the 10th International Conference on Intelligent Computation Technology and Automation.Washington D.C.,USA:IEEE Press,2017:172-175.
[14] XU Haowen,GOU Xiantai,LI Changxi,et al.Reverse analysis of measurement and control protocol based on the monitoring state data for unmanned platform[C]//Proceedings of the 14th International Conference on Signal Processing,Communication and Networking.Washington D.C.,USA:IEEE Press,2017:1-7.
[15] CHEN Yongjie,Wushou Slamu,YU Qing.An improved multi-pattern matching algorithm based on Aho-Corasick algorithm[J].Modern Electronics Technique,2019,42(4):89-93.(in Chinese)陈永杰,吾守尔·斯拉木,于清.一种基于Aho-Corasick算法改进的多模式匹配算法[J].现代电子技术,2019,42(4):89-93.
[16] YAN Xiaoyong.Research and implementation on the key technologies for Binary private protocol[D].Zhengzhou:Strategic Support Force Information Engineering University,2018.(in Chinese)闫小勇.二进制私有协议逆向关键技术研究与实现[D].郑州:战略支援部队信息工程大学,2018.
[17] THAMBAWITA D,RAGEL R G,ELKADUWE D.An optimized parallel failure-less Aho-Corasick algorithm for DNA sequence matching[C]//Proceedings of 2016 IEEE International Conference on Information and Automation for Sustainability.Washington D.C.,USA:IEEE Press,2016:1-6.
[18] TAO Shusong,CHEN Xingshu,YIN Xueyuan.Identification of unknown frame structure based on data mining[J].Journal of Sichuan University(Engineering Science Edition),2014,46(S1):155-159.(in Chinese)陶术松,陈兴蜀,尹学渊.基于数据挖掘的未知帧结构识别[J].四川大学学报(工程科学版),2014,46(S1):155-159.
[19] BALCERZAK B,JAWORSKI W,WIERZBICKI A.Application of TextRank algorithm for credibility assessment[C]//Proceedings of 2014 IEEE/WIC/ACM International Joint Conferences on Web Intelligence(WI) and Intelligent Agent Technologies(IAT).Washington D.C.,USA:IEEE Press,2014:451-454.

选择文件类型/文献管理软件名称

选择包含的内容