Blind identification of network protocols based on improved Apriori algorithm

Abstract

Abstract With the development and application of network technology and private protocols, more and more unknown protocols are found in communication networks. Analysis and identification of unknown protocols has become an important and difficult problem in obtaining valuable information from data. Based on the traditional Apriori algorithm, a reduced bit string algorithm and a weight compression algorithm are proposed to identify the unknown protocols according to the characteristics of network unknown protocol data in this paper. These proposed algorithms make use of location information, matrix compression, bit string and weight compression to gradually improve the identification accuracy and the processing efficiency of unknown protocols. Experiments on simulation data and actual data demonstrate the performance of the improved algorithms in terms of identification accuracy and time efficiency.