SYSTEM AND METHOD FOR IDENTIFYING P2P APPLICATION SERVICE

摘要

A system and a method for identifying a P2P application service are provided to maintain a network safely and effectively by finding an abnormal traffic like a worm virus in managing the network. A method for identifying a P2P application service comprises the following several steps. A flow generator collects IP packets and generates a flow(S200). A port number based identifier identifies a P2P application service on the basis of the port number by using the generated flow(S201). If the P2P application service is identified(S202), an checking unit checks the identified application service(S203). If the application service is not correctly identified(S204) or the P2P application service is not identified in the step S202, a payload based identifier identifies the P2P application service on the basis of the payload(S205). If the P2P application service identified on the basis of the payload(S206) or the identification is checked in the step S204, a SET table generator generates a SET table by using the identified application service flow(S207). A SET table based identifier identifies a P2P application service by using the SET table with respect to a flow not identified via the port number based identification or the payload based identification(S208).