A protocol field inverse analysis system and method based on BWT

A technology of reverse analysis and protocol word, which is applied in the field of network protocol, can solve the problems such as the influence of comparison effect, and achieve the effect of fast comparison, high memory efficiency and less space consumption

Active Publication Date: 2018-12-18
HARBIN INST OF TECH AT WEIHAI
View PDF6 Cites 18 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Satisfactory results can be achieved when the similarity of the sequence samples is high.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A protocol field inverse analysis system and method based on BWT
  • A protocol field inverse analysis system and method based on BWT
  • A protocol field inverse analysis system and method based on BWT

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0041] In order to make the purpose, features and advantages of the present invention more obvious and understandable, the technical solutions protected by the present invention will be clearly and completely described below using specific embodiments and accompanying drawings. Obviously, the implementation described below Examples are only some embodiments of the present invention, but not all embodiments. Based on the embodiments in this patent, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of this patent.

[0042] Embodiments of the BWT-based protocol field reverse analysis system and analysis method of the present invention are formulated, and the embodiments of the present invention include: figure 1 As shown, input preprocessing module 1, protocol format extraction module 2 and field fuzzing module 3. The input preprocessing module 1 is used to segment the input message at the granularity...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a protocol field reverse analysis system and method based on BWT. Specific suffix index is constructed, so that specific substring matching only needs to be completed once in each alignment process. Moreover, the alignment algorithm based on suffix index is flexible in design, consumes less space in the index stage, and the length of subsequence is variable, protocol fieldscan be quickly identified. After the fixed field is identified, the invention counts the fields with high frequency through a random multi-stream multi-segment matching method, constructs a grammar tree according to the field position and the number of the fields, extracts the field structure, and thus realizes the inverse of the field format. After being classified, the reverse field is used asthe input of the fuzzy test tool, a large number of deformity test cases is sent to the target communication entity, and at the same time, the debugger is combined with the sniffer to carry out abnormal monitoring on the target communication entity, the abnormality is found and analyzed, so as to subsequently improve the safety of the target communication entity.

Description

technical field [0001] The invention relates to the field of network protocols, in particular to a BWT-based protocol field reverse analysis system and method. Background technique [0002] With the popularization of Internet technology, there are more and more researches related to network protocols, many of which are based on the detailed description information of the protocol, that is, the protocol specification, so the role of the protocol reverse field is becoming more and more important. Protocol refers to a set of rules and agreements that must be followed when various communication entities in computer networks and distributed systems exchange information with each other. Both parties exchanged information methodically and reliably. There are not only a large number of standardized communication protocols in the network, but also a large number of private protocols in the network, that is, unknown protocols. The emergence of unknown protocols is partly due to the ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06H04L12/26
CPCH04L43/18H04L69/22Y02D30/50
Inventor 黄晓雪孙云霄黄俊恒刘扬王佰玲王巍
Owner HARBIN INST OF TECH AT WEIHAI
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products