Method of application classification in Tor anonymous communication flow

Abstract

The invention discloses a method of application classification in Tor anonymous communication flow, which mainly solves the problem of acquisition of upper-layer application type information in the Tor anonymous communication flow and relates to the correlation technique, such as feature selection, sampling preprocessing and flow modeling. The method comprises the following steps of: firstly, defining a concept of a flow burst section by utilizing a data packet scheduling mechanism of Tor, and serving a volume value and a direction of the flow burst section as classification features; secondly, preprocessing a data sample based on a K-means clustering algorithm and a multiple sequence alignment algorithm, and solving the problems of over-fitting and inconsistent length of the data sample through the manners of value symbolization and gap insertion; and lastly, respectively modeling uplink Tor anonymous communication flow and downlink Tor anonymous communication flow of different applications by utilizing a Profile hidden Markov model, providing a heuristic algorithm to establish the Profile hidden Markov model quickly, during specific classification, substituting features of network flow to be classified into the Profile hidden Markov models of different applications, respectively figuring up probabilities corresponding to an uplink flow model and a downlink flow model, and deciding the upper-layer application type included by the Tor anonymous communication flow to be classified through a maximum joint probability value.

Description

technical field [0001] The present invention is a classification method of Tor anonymous communication traffic application, utilizes related technologies such as feature selection, sample preprocessing and traffic modeling, and relates to network security, especially the research fields of anonymous communication and traffic analysis. Background technique [0002] With the rapid development and widespread use of the Internet and mobile Internet, the network has been integrated into every aspect of people's daily life. At the same time, the security and privacy issues brought about by network communication have also received more and more attention. In order to protect the privacy information of network users, researchers have designed a variety of anonymous communication schemes such as the onion routing protocol, and developed some practical anonymous communication systems on this basis, such as Tor, JAP, I2P, etc. But the widespread use of anonymous communication systems ...

AI Technical Summary

Problems solved by technology

The anonymous communication system originally used to protect user privacy information is being abused by attackers, posing a huge threat to network security

Images