Network service provision method based on automatic identity recognition

Abstract

The invention discloses a network service provision method based on automatic identity recognition. The method mainly comprises the following steps of 1) adopting an sFlow technology to extract network user traffic feature information, namely a timestamp, a source IP address and traffic size; 2) counting online frequency of each IP address in a corresponding time interval in a week; 3) utilizing a k-means algorithm to carry out clustering analysis on the IP addresses according to the online frequency in the corresponding time interval in the week in order to obtain N user categories and a feature center value of respective feature information of each user category; 4) respectively making corresponding network policies for the N user categories; 5) issuing an OpenFlow flow table to an OVS switch; 6) forwarding on the OVS switch according to the flow table; and 7) matching the new network user traffic feature information and the feature center values of the N user categories weekly, affiliating the IP address to the user category with the highest similarity with the feature center value and updating the IP address included in the user category.

Description

technical field [0001] The present invention relates to the use of data mining to dynamically analyze network user behavior characteristic information based on the SDN (Software Defined Network) architecture, and apply the analysis results to the formulation and automatic distribution of network services to provide network users with customized network services. Serve. Background technique [0002] The problem of network security is an urgent problem that the current network is facing. One of the most effective means to solve the problem of network security is to use a firewall. One of the main problems in the traditional firewall network architecture is that firewall security policies are configured one by one by the network administrator, which brings a huge burden to the network administrator. The emergence of SDN network can well solve the above problems. [0003] In recent years, with the rapid development of Internet technology and e-commerce, in order to maintain In...

AI Technical Summary

Problems solved by technology

[0005] However, in network management, network administrators have a lot of tedious work to do every day

The formulation and distribution of network service policies requires network administrators to manually formulate and distribute relevant network services based on the IP addresses of network users. However, the IP addresses of network users may change dynamically, which requires network administrators to manually implement Identification, which obviously increases the workload of network administrators, and excessive human intervention increases the probability of errors in network management

Images