Network data message processing method and device

Abstract

The invention discloses a network data message processing method. The network data message processing method includes the steps of establishing a service template feature library, extracting uniform resource locator (URL) information in a network data message, conducting matching and recognition on the extracted URL information and the service template feature library, obtaining a service template corresponding to the network data message, conducting corresponding variable feature extraction on the network data message according to variable features contained in the service template and storing obtained variable features correspondingly. Meanwhile, the invention further discloses a network data message processing device.

Description

technical field [0001] The invention relates to identification and auditing technology of network data messages in network security and online behavior management, in particular to a processing method and device for network data messages. Background technique [0002] In the field of network security and online behavior management, the analysis and management of user data is an important means to prevent confidentiality leakage and virus intrusion, and it is also a way to quickly prevent crimes. In the Internet field, users can spread information in various ways. Data, such as forums, microblogs, blogs and other applications, these applications have filled all directions of people's lives, such as cultural exchanges, social hot comments, and knowledge dissemination, etc., and network data messages are the most prominent form of data dissemination Therefore, it is very necessary to identify and audit network data packets. [0003] In the prior art, identification and auditin...

AI Technical Summary

Problems solved by technology

[0003] In the prior art, identification and auditing of network data packets can be performed by identifying various protocols of network data packets from network packets, and then performing audit feature identification on the basis of protocol identification. However, this processing According to different protocols and audit features, it is necessary to add corresponding processing functions to complete the audit operation. However, there is no unified standard format for network data messages, and there are many types of formats. To identify and audit a specific message, it must be based on The format of the message adds corresponding code processing logic. In this way, it takes a lot of time for the staff to analyze and summarize the protocols and characteristics of each specific network data message, which leads to high maintenance costs and low performance.

Images