IDENTIFICATION METHOD AND SYSTEM FOR IDENTIFYING ENCRYPTION PROTOCOL BY UTILIZING DIGITAL CERTIFICATE

摘要

The present invention relates to the field of Internet application technology. Disclosed are an identification method and system for identifying an encryption protocol by utilizing a digital certificate. The method comprises: S1: scanning a current packet to acquire features of a protocol keyword; S2: matching the features of the protocol keyword to a preset feature library; S3: in continuation, scanning a subsequent packet to acquire a keyword of a server digital certificate; S4: matching the keyword of the server digital certificate to the preset feature library and, if a matching result is acquired, then identifying as a protocol packet corresponding to the matching result, and if not, identifying the current packet as an HTTPS protocol packet. Different from existing coarse-grained identification methods, the method of the present invention excavates the feature of the HTTPS protocol from a deeper perspective, extracts unique keywords from the digital certificate, effectively distinguishes different application protocols that use the HTTPS protocol, and increases the granularity of application identification and of application control.