Protocol state machine automatic inference method based on state fusion

A technology of protocol state and state fusion, applied in the network field, can solve the problems of difficulty in ensuring accuracy, restricting the efficiency of reverse analysis, and low degree of automation, so as to achieve the effect of improving accuracy, improving accuracy and overall efficiency, and ensuring automation

Active Publication Date: 2013-12-11
PLA UNIV OF SCI & TECH
View PDF6 Cites 12 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The current protocol state machine inference mainly has the following problems: (1) For the sake of simplicity, the existing state fusion methods (such as the Prospex system) aim at a finite state machine with no output
O

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Protocol state machine automatic inference method based on state fusion
  • Protocol state machine automatic inference method based on state fusion
  • Protocol state machine automatic inference method based on state fusion

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0022] In order to better understand the technical content of the present invention, specific embodiments are given and described as follows with reference to the accompanying drawings.

[0023] like figure 1 As shown, according to a preferred embodiment of the present invention, the method for automatically inferring the protocol state machine based on state fusion includes the following steps:

[0024] (1) Message format extraction and message classification: First, a large number of input and output message sequences are collected, and then the existing message format extraction method is used to obtain the specific format information of the input and output messages related to the protocol entity program. Here Basically, according to the message format, the input and output messages are classified respectively, and the message samples with the same structure are classified into one category, and the category information of the classification is represented by abstract symb...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a protocol state machine automatic inference method based on state fusion. The method comprises the following steps of message format extraction, message classification, session abstraction and original state machine construction and the state fusion based on output messages. An extended prefix tree transducer EPTT is adopted in the protocol state machine automatic inference method to describe the session process of a protocol entity, the output messages of a protocol are focused on, the same states in a state machine are fused, testability interaction is carried out on the protocol entity to verify the feasibility of protocol state fusion, the automation of the inference of the protocol state machine is guaranteed, and the accuracy of an inference result is improved.

Description

technical field [0001] The invention relates to the field of network technology, in particular to a method for automatically inferring a protocol state machine of a corresponding network protocol based on network messages received and sent by a protocol entity program. Background technique [0002] Network protocols are the supporting elements for the realization of network communication functions, and are also key research objects in the field of network security. A large number of network security technologies such as intrusion detection, fuzz testing, protocol reuse, and protocol vulnerability analysis are based on detailed protocol specification information. [0003] A large number of private protocols lacking description documents are used in the network, which greatly limits the application range of various network security technologies that rely on information specifications. In order to solve the problem of unknown protocol information, researchers began to use the ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06
Inventor 洪征吴礼发郑成辉潘璠赖海光李华波周振吉
Owner PLA UNIV OF SCI & TECH
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap