IPFRA: An Online Protocol Reverse Analysis Mechanism

Zhang, Xiaoming; Qian, Qiang; Wang, Weisheng; Wang, Zhanfeng; Wei, Xianglin

doi:10.1007/978-3-030-00015-8_28

Cited by 1 publication

(1 citation statement)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Tao et al [23] proposed the PRE-Bin, which uses hierarchical clustering to identify the number of clusters by silhouette coefficient, then applies the modified multiple sequence alignment algorithm to analyze binary field features, and finally uses the Bayesian decision model to infer the bit-oriented field boundaries. Zhang et al [24] proposed an online protocol format extraction method, which divides the network traffic into sub-flows and introduces an error decision mechanism to divide the sub-flows to ensure the correctness of the format extraction. Marchetti and Stabili [25] developed READ to analyze traffic traces based on automotive data frames.…”

Section: Related Workmentioning

confidence: 99%

A Security Analysis Method of Security Protocol Implementation Based on Unpurified Security Protocol Trace and Security Protocol Implementation Ontology

Liu

Huang

et al. 2019

IEEE Access

View full text Add to dashboard Cite

The security analysis of Security Protocol Implementations(SPI) is an important part of cybersecurity. However, with the strength of property protection and the widely used applications of code obfuscation technology, the previous security analysis method based on SPI is hard to carry out. Therefore, under the condition that SPI is not available, this paper analyzes the security of the SPI using the unpurified security protocol traces and security protocol implementation ontology. First, we construct the implementation ontology to describes the attributes of the ontology terms. Second, the format analysis method is presented based on unpurified flow. Third, the mapping method is proposed to build the mapping between the security protocol trace and the implementation ontology. Fourth, a is presented to analyze the security of SPI. Finally, FSIA software is designed and implemented according to the method we proposed to analyze the login module of a university information system, the result shows that there is a risk of Ticket leakage in the login module. Compared to the previous method,our proposed method can deal with unpurified network traces and find the vulnerabilities of network and system.INDEX TERMS Security protocol implementation, network trace, security protocol implementation ontology, format analysis, semantic analysis.

show abstract

Section: Related Workmentioning

confidence: 99%