.png){kind=icon}
返回
Crafting Binary Protocol Reversing via Deep Learning With Knowledge-Driven Augmentation
.png){kind=icon}
PRE
AI
DOI：10.1109/TNET.2024.3468350.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Protocol reverse engineering (PRE) serves as an instrumental tool in various security research, such as protocol fuzzing and intrusion detection. Its primary objective lies in uncovering the format, semantics, and behavior of an unknown protocol without prior information. This paper presents DL-ProS(2), a deep learning-based approach for binary protocol reversing, focusing on format segmentation and semantic inference from network traffic. Our approach is underpinned by highlighting the effectiveness of multi-scale features within the network traffic for identifying various types of fields and semantics. Based on this, DL-ProS(2) employs a comprehensive end-to-end model that integrates U-Net, siamese network, and BiLSTM-CRF, which enables the effective analysis of unknown protocol traffic to extract the field boundaries and semantics. Meanwhile, to address the issue of limited data diversity and coverage, we implement an innovative knowledge-driven traffic simulation technique. This method harnesses the ChatGPT to extract protocol knowledge from publicly available protocol documents, such as RFCs, as the foundational rules for the simulation. Empirical results substantiate the efficacy of our approach, demonstrating precision rates exceeding 0.95 and recall rates surpassing 0.97 for partially unknown protocol format segmentation and semantic inference. It also retains effectiveness in the inference of completely unknown protocols, with average precision and recall rates of 0.69 and 0.62 for format segmentation, and 0.43 and 0.47 for semantic inference, respectively.
Keyword:
Protocols
Semantics
Feature extraction
Telecommunication traffic
Security
Image segmentation
Data mining
Artificial neural networks
Training
Reverse engineering
Protocol reverse engineering
format segmentation
semantic inference
protocol specification extraction
期刊
I
IF:
3.6
论文数:
4.4K
被引数:
9.5K
机构
引用论文
Characterization of polymer matrix and low melting point solder for anisotropic conductive film各向异性导电膜用聚合物基体及低熔点焊料的表征
PREAI
分享收藏Metabolic crosstalk between membrane and storage lipids facilitates heat stress management in Schizosaccharomyces pombe.png)
PLOS ONE
OAAI
PLOS ONEIF0
OAAI分享收藏The Use of Artificial Neural Networks for Modeling Color and Chemical Oxygen Demand Removal from Olive Mill Wastewater Using Grape Molasses Soil利用人工神经网络对利用葡萄蜜糖土壤处理橄榄油废水中的颜色和化学需氧量去除进行建模
PREAI
分享收藏Systematic Review and Meta-analysis on Extended-Spectrum β-lactamases Producing Klebsiella pneumoniae in Nepal关于尼泊尔产超广谱β-内酰胺酶Klebsiella pneumoniae的系统评价和Meta分析OAAI
OAAI分享收藏
分享收藏
查看更多内容