The Design And Implementation Of Application Feature Recognition System Based On Deep Packet Inspection

Application’s feature mostly located in the application layer’s payload. Based on the port identification, the inspection technology only detects the packet from the second to fourth layer. This method becomes powerless for modern application’s identification and control. The accurate application recognition has become a difficult problem for application management. Application recognition is the premise of the application management, an important feature of network security product. More than100kinds of application could be identified by the application feature recognition system. The system identifies the application which provides the conditions for the subsequent application management.The topic of this paper is derived from the project developed by the author in a local company during the internship. The following tasks have been completed during the system development:(1) Participate in formulating the evaluation of application feature identification and building the technique pathway of the application recognition system. On the base of the Netfilter Framework, the system’s application recognition technique adopts deep packet inspection technique and optimizes the application contents in detecting module L7-filter and IPP2P.(2) Develop the system independently. Utilize the advantages of the L7-filter and IPP2P technology in extending the L7-filter module to implement the matching of application feature. By extending the L7-filter module, the system’s policy management module has been implemented.(3) Take part in deploying the verification system. Obtain and analyze the experimental data to verify the system.The pre-established goal has been achieved by the analysis of the experimental data. The system presents performances of stable running and identification of the application accurately and effectively.