摘要
介绍了协议逆向工程中协议状态机推断的研究进展。从状态机推断与正则语言学习的关系出发,分析了协议状态机推断的目标与需求;然后依据分析对象不同,将协议状态机推断分为基于指令序列和报文序列两大类,进一步将基于报文序列的状态机推断分为主动推断和被动推断两种;研究分析了各层面涉及到的方法与技术,并作出了评价与比较。最后对协议状态机推断研究的发展趋势进行了展望。
This paper reviewed the research and development on protocol state machine inference in protocol reverse engineering. Firstly, this paper summarized the goals and needs of protocol state machine inference by analyzing the relationship between state machine inference and regular language learning. Due to different analyzing objects, it classified the research into two categories, namely the execution trace-based and network trace-based protocol state machine inference. In addition, it di- vided the later one into active and passive inference. And then this paper introduced, evaluated and compared the key method in different researches based on this classification. Finally, it analyzed some important directions of the research on protocol state machine inference in future.
出处
《计算机应用研究》
CSCD
北大核心
2015年第7期1931-1936,共6页
Application Research of Computers
基金
江苏省自然科学基金资助项目(BK2011115
BK20131069)
关键词
协议逆向工程
协议状态机推断
正则语言学习
指令序列
报文序列
protocol reverse engineering
protocol state machine inference
regular language learning
execution trace
network trace
