期刊名称：International Journal of Hybrid Information Technology
印刷版ISSN：1738-9968
出版年度：2013
卷号：6
期号：3
出版社：SERSC
摘要：This paper presents a set of programme to extract the application-layer protocol features. Based on frequent itemsets mining, the program automatically extracts four most common features of a protocol: characteristic string, session tag, packet length, and packet order. It is experimentally demonstrated that this progran can significantly improve the efficiency of feature extraction, and can be extended to other areas such as intrusion detection and extracting worm signature
关键词：Protocol identification; Automatically extracted features of protocols; Apriori ;algorithm
