BCBPI: A noval behavior chain based protocol identification method

Protocol identification is critical for managing the network, from traffic classification to intrusion detection. However, the traditional protocol identification techniques have become less effective as more and more new network applications have adopted complex interaction and encrypted techniques in recent years. In this paper, we address behavior chains of the protocols, and propose a novel method based on behavior chain to identify some kinds of protocols. The experimental results show that the protocol behavior chain exists and can be used to identify the different application.