A Reverse Analysis Method of Unknown Protocol Based on Fuzz Testing
A technology of fuzzy testing and analysis methods, applied in digital transmission systems, data exchange networks, electrical components, etc., can solve problems such as time-consuming and labor-intensive reverse engineering, complex protocol specifications, etc.
Active Publication Date: 2021-01-15
成都网域复兴科技有限公司
View PDF7 Cites 2 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
However, as the current network is becoming more and more complex, the protocol specification of the software itself is also becoming more and more complex, and the time and labor required for reverse engineering are also increasing. Therefore, an automated method is urgently needed to perform reverse analysis of unknown protocols to reduce Corresponding cost, improve work efficiency
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0035] The specific implementation manners of the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. The following examples are used to illustrate the present invention, but are not intended to limit the scope of the present invention.
[0036] The core idea of this application is to use the initially generated protocol specification 1 to perform fuzz testing. The essence of fuzz testing is to expand the sample set and provide counterexamples (if only positive examples are provided, that is, directly using intercepted data packets, then We can only obtain positive examples, so regular language cannot be obtained through learning, then fuzz testing will allow the server to provide counterexamples, making our inference more complete), for example, sending data packet 1 but not responding, it means that the data packet 1 itself is inferred The situation is just wrong. Using this feature, we can point out s...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention relates to the field of computer network communication, and discloses an unknown protocol reverse analysis technical method based on fuzzy testing. The unknown protocol reverse analysistechnical method comprises the following steps of S1, acquiring a data packet: performing data preprocessing, session division and message delimiting; S2, carrying out protocol format extraction and state machine inference on the basis of the existing data packet, and outputting a preliminary protocol specification description; S3, generating a test case on the basis of preliminary or improved protocol specification, sending the data packet by adopting a fuzzy testing method with a control function, and making an inference according to a response; and S4, carrying out corresponding adjustmentaccording to the returned data packet: if a proportion of the sent data packet in all protocol formats meets a threshold value, outputting the corresponding protocol specification, or otherwise, performing morphology and grammar adjustment according to the returned data packet. By adopting an automatic method, the manual work of protocol analysis and reverse analysis can be reduced, and certain accuracy can be realized, so that the efficiency of the reverse analysis can be improved.
Description
technical field [0001] The invention belongs to the field of reverse analysis of unknown protocols in network communication, and specifically relates to a method for reverse analysis of unknown protocols based on fuzzy testing, which uses intercepted data packets and data packets answered by servers to implement reverse analysis of unknown protocols. Background technique [0002] The current era is the era of the Internet. In order to exchange data in an orderly manner in the computer network, some pre-agreed rules must be followed. These rules specify the format of the data exchanged and related synchronization issues. According to statistics, there are currently more than 600 network protocols running on the Internet and enterprise networks, and more than 2,000 network applications. At the same time, new, private, and unknown network communication protocols in the network are constantly increasing. The communication protocol in the LAN in the enterprise unit and the wide ...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L12/26
CPCH04L43/18H04L69/03H04L69/22
Inventor 陈香宇
Owner 成都网域复兴科技有限公司