Abstract: To detect the various applications in the Internet, using the application-signature recognition and the flow-grouping technology, this paper presents a network traffic analysis and risk assessment system——TARAS. It developes the risk assessment model based on the flow-grouping technology. The system can provide valuable basis for the network resource allocation and network security forecast. Experimental results show that TARAS has good flow analysis efficiency and high accuracy of risk assessment.

Key words: application-traffic analysis, risk assessment, flow grouping

摘要： 针对网络中的各种应用服务的识别检测，采用应用层协议签名的流量识别技术和流量分组技术，实现网络应用流的分析和风险评估系统——TARAS，提出基于流量分组技术的应用流风险评估模型。该系统为网络资源分配和网络安全的预测提供有价值的依据。实验结果表明，TARAS系统具有良好的流量分析效率和风险评估准确性。

关键词: 应用流分析, 风险评估, 流量分组

CLC Number: 

• TP391