METHOD AND APPARATUS FOR APPLICATION DETECTION

摘要

The present invention provides a method and an apparatus for detecting an application. The present invention receives and inspects packets; detects flows from the packets using a predefined signature; assigns a score to each of the detected flows respectively; aggregates the detected flows for each application to sum the assigned scores; compares the summed score of the flows aggregated for each application with a preset value; and determines that the application is detected if the summed score is greater than the preset value.