基于消息概率分布分析的协议逆向工程

2020 International Conference on Computer Engineering and Intelligent Control (ICCEIC) Pub Date : 2020-11-01 DOI:10.1109/icceic51584.2020.00022

Wu Weisen, Gu Chunxiang

{"title":"基于消息概率分布分析的协议逆向工程","authors":"Wu Weisen, Gu Chunxiang","doi":"10.1109/icceic51584.2020.00022","DOIUrl":null,"url":null,"abstract":"The protocol reverse engineering is becoming more and more important because of the unknown protocols. This study proposes a protocol reverse method, based on the network traffic, which uses the probability distribution relationship between the fields to analyze the field boundaries. The experimental results show that the algorithm is better than Netzob in running results and time.","PeriodicalId":135840,"journal":{"name":"2020 International Conference on Computer Engineering and Intelligent Control (ICCEIC)","volume":"49 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2020-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":"{\"title\":\"Protocol Reverse Engineering by Analysis of the Probability Distribution of Messages\",\"authors\":\"Wu Weisen, Gu Chunxiang\",\"doi\":\"10.1109/icceic51584.2020.00022\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"The protocol reverse engineering is becoming more and more important because of the unknown protocols. This study proposes a protocol reverse method, based on the network traffic, which uses the probability distribution relationship between the fields to analyze the field boundaries. The experimental results show that the algorithm is better than Netzob in running results and time.\",\"PeriodicalId\":135840,\"journal\":{\"name\":\"2020 International Conference on Computer Engineering and Intelligent Control (ICCEIC)\",\"volume\":\"49 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2020-11-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2020 International Conference on Computer Engineering and Intelligent Control (ICCEIC)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/icceic51584.2020.00022\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2020 International Conference on Computer Engineering and Intelligent Control (ICCEIC)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/icceic51584.2020.00022","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 1

摘要

由于未知协议的存在，协议逆向工程变得越来越重要。本文提出了一种基于网络流量的协议反向方法，利用字段之间的概率分布关系来分析字段边界。实验结果表明，该算法在运行效果和时间上都优于Netzob算法。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

查看原文本刊更多论文

Protocol Reverse Engineering by Analysis of the Probability Distribution of Messages

The protocol reverse engineering is becoming more and more important because of the unknown protocols. This study proposes a protocol reverse method, based on the network traffic, which uses the probability distribution relationship between the fields to analyze the field boundaries. The experimental results show that the algorithm is better than Netzob in running results and time.

求助全文

通过发布文献求助，成功后即可免费获取论文全文。去求助

来源期刊

2020 International Conference on Computer Engineering and Intelligent Control (ICCEIC)

自引率

0.00%

发文量