本文選題：協(xié)議偏離 + 協(xié)議逆向工程��； 參考：《計算機工程與科學(xué)》2015年04期

【摘要】：針對傳統(tǒng)協(xié)議指紋提取技術(shù)耗時耗力,且無法提取與識別加密協(xié)議指紋問題,提出了一種基于協(xié)議偏離的程序協(xié)議指紋自動提取方法。協(xié)議偏離描述了協(xié)議各版本實現(xiàn)程序的網(wǎng)絡(luò)行為差異,以動態(tài)二進制分析技術(shù)為支撐,分別從協(xié)議偏離會話流層面與偏離消息層面對協(xié)議特征進行提取。實驗結(jié)果不僅驗證了所提方法的可行性,還為提取與識別加密協(xié)議應(yīng)用程序指紋提供了一條新思路。
[Abstract]:Aiming at the problem that traditional protocol fingerprint extraction is time-consuming and difficult to extract and identify encryption protocol fingerprint, a protocol based automatic fingerprint extraction method based on protocol deviation is proposed. Protocol deviation describes the network behavior differences of protocol implementation programs in different versions. Based on the dynamic binary analysis technology, the protocol features are extracted from the protocol deviation session flow level and the departure message level respectively. The experimental results not only verify the feasibility of the proposed method, but also provide a new idea for fingerprint extraction and recognition of encryption protocol applications.
【作者單位】： 國防科學(xué)技術(shù)大學(xué)計算機學(xué)院;
【基金】：教育部高等學(xué)校博士學(xué)科點專項科研基金資助項目(20124307110014)
【分類號】：TP393.08;TP391.41
，

本文編號：2093661