BONPR: A Network Protocol Recognizer for Bitstream
Xiangqian Han · 2024
with the development of network technology, the number of network applications increases rapidly, public network protocols and private network protocols are booming, which puts forward higher requirements for the identification and analysis of network protocols. bitstream-oriented network protocol analysis is of great significance for network monitoring, network security and quality of service assurance. at present, most of the methods used in network protocol identification are highly targeted, and there are some limitations in the accuracy of known protocol identification, encrypted data identification, automatic mining of new protocol types and so on. this paper proposes BONPR (a bitstream oriented network protocol recognizer), which realizes known network protocol data recognition based on deep flow detection. a new run test method is used to test the randomness of the data, and the unknown protocol types are identified by data slicing and fixed position data statistics.finally the test data are constructed to prove the effectiveness of the system.