.png){kind=icon}
Return
Position-based automatic reverse engineering of network protocols
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jnca.2013.01.013.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Automatic protocol reverse engineering is a process of extracting protocol message formats and protocol state machine without access to the specification of target protocol. Protocol reverse engineering is useful for addressing many problems of network management and security, such as network management, honey-pot systems, intrusion detection, Botnet detection and prevention, and so on. Currently, protocol reverse engineering is mainly a manual and painstaking process which is time-consuming and error-prone. In this paper, we present a novel approach for automatic reverse engineering application-layer network protocols. We extract protocol keywords from network traces based on their support rates and variances of positions, reconstruct message formats, and infer protocol state machines. We implement our approach in a prototype system called AutoReEngine and evaluate it over four text-based protocols (HTTP, POP3, SMTP and FTP) and two binary protocols (DNS and NetBIOS). The results show that our AutoReEngine outperforms the existing algorithms. (C) 2013 Elsevier Ltd. All rights reserved.
Keywords:
Protocol reverse engineering
Protocol keyword
Variance analysis
Message format
State machine
AI Summary
Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.
Journal
IF:
8
Papers:
3.7K
Citations:
1.1W
Organization
Cited Papers
.png){kind=icon}
ShareSaveShareSave
Characterization of polymer matrix and low melting point solder for anisotropic conductive film
PREAI
ShareSaveShareSave
ShareSaveShareSave no more
no more