基于协议偏离的程序协议指纹提取与识别

发布时间：2018-07-03 12:33

  本文选题：协议偏离 + 协议逆向工程　； 参考：《计算机工程与科学》2015年04期

【摘要】：针对传统协议指纹提取技术耗时耗力,且无法提取与识别加密协议指纹问题,提出了一种基于协议偏离的程序协议指纹自动提取方法。协议偏离描述了协议各版本实现程序的网络行为差异,以动态二进制分析技术为支撑,分别从协议偏离会话流层面与偏离消息层面对协议特征进行提取。实验结果不仅验证了所提方法的可行性,还为提取与识别加密协议应用程序指纹提供了一条新思路。
[Abstract]:Aiming at the problem that traditional protocol fingerprint extraction is time-consuming and difficult to extract and identify encryption protocol fingerprint, a protocol based automatic fingerprint extraction method based on protocol deviation is proposed. Protocol deviation describes the network behavior differences of protocol implementation programs in different versions. Based on the dynamic binary analysis technology, the protocol features are extracted from the protocol deviation session flow level and the departure message level respectively. The experimental results not only verify the feasibility of the proposed method, but also provide a new idea for fingerprint extraction and recognition of encryption protocol applications.
【作者单位】： 国防科学技术大学计算机学院;
【基金】：教育部高等学校博士学科点专项科研基金资助项目(20124307110014)
【分类号】：TP393.08;TP391.41
，

本文编号：2093661