协议状态机推断技术研究进展

介绍了协议逆向工程中协议状态机推断的研究进展.从状态机推断与正则语言学习的关系出发,分析了协议状态机推断的目标与需求;然后依据分析对象不同,将协议状态机推断分为基于指令序列和报文序列两大类,进一步将基于报文序列的状态机推断分为主动推断和被动推断两种;研究分析了各层面涉及到的方法与技术,并作出了评价与比较.最后对协议状态机推断研究的发展趋势进行了展望.

Overview on protocol state machine inference:a survey

This paper reviewed the research and development on protocol state machine inference in protocol reverse engineering. Firstly, this paper summarized the goals and needs of protocol state machine inference by analyzing the relationship between state machine inference and regular language learning. Due to different analyzing objects, it classified the research into two categories, namely the execution trace-based and network trace-based protocol state machine inference. In addition, it divided the later one into active and passive inference. And then this paper introduced, evaluated and compared the key method in different researches based on this classification. Finally, it analyzed some important directions of the research on protocol state machine inference in future.