Network heartbeat packets recognition based on DTW and HC-FCM algorithm

Heartbeat packets are usually used to complete the auxiliary work of applications. These packets are mostly insensitive to the business logic, and they are generally used to detect the existence of network connections, or check for patches and updates. The existing products with similar functions can only recognize heartbeat packets with pre-defined signatures. In order to provide a more general approach, we develop an algorithm which can recognize heartbeat packets based on timing characteristics, packet size, payload content, and a set of protocol related properties.