本文選題：協(xié)議偏離 + 協(xié)議逆向工程�。� 參考：《計(jì)算機(jī)工程與科學(xué)》2015年04期

【摘要】：針對(duì)傳統(tǒng)協(xié)議指紋提取技術(shù)耗時(shí)耗力,且無(wú)法提取與識(shí)別加密協(xié)議指紋問題,提出了一種基于協(xié)議偏離的程序協(xié)議指紋自動(dòng)提取方法。協(xié)議偏離描述了協(xié)議各版本實(shí)現(xiàn)程序的網(wǎng)絡(luò)行為差異,以動(dòng)態(tài)二進(jìn)制分析技術(shù)為支撐,分別從協(xié)議偏離會(huì)話流層面與偏離消息層面對(duì)協(xié)議特征進(jìn)行提取。實(shí)驗(yàn)結(jié)果不僅驗(yàn)證了所提方法的可行性,還為提取與識(shí)別加密協(xié)議應(yīng)用程序指紋提供了一條新思路。
[Abstract]:Aiming at the problem that traditional protocol fingerprint extraction is time-consuming and difficult to extract and identify encryption protocol fingerprint, a protocol based automatic fingerprint extraction method based on protocol deviation is proposed. Protocol deviation describes the network behavior differences of protocol implementation programs in different versions. Based on the dynamic binary analysis technology, the protocol features are extracted from the protocol deviation session flow level and the departure message level respectively. The experimental results not only verify the feasibility of the proposed method, but also provide a new idea for fingerprint extraction and recognition of encryption protocol applications.
【作者單位】： 國(guó)防科學(xué)技術(shù)大學(xué)計(jì)算機(jī)學(xué)院;
【基金】：教育部高等學(xué)校博士學(xué)科點(diǎn)專項(xiàng)科研基金資助項(xiàng)目(20124307110014)
【分類號(hào)】：TP393.08;TP391.41
，

本文編號(hào)：2093661