基于状态标注的协议状态机逆向方法  

Protocol state machine reverse method based on labeling state

作　　者：黄笑言[1] 陈性元[1] 祝宁[1] 唐慧林[1] 

机构地区：[1]信息工程大学,郑州450004

出　　处：《计算机应用》2013年第12期3486-3489,3498,共5页journal of Computer Applications

基　　金：国家973计划项目(2011CB311801);河南省科技创新人才计划项目(114200510001)

摘　　要：协议状态机可以描述一个协议的行为,帮助理解协议的行为逻辑。面向文本类协议,首先利用统计学方法提取表示报文类型的语义关键字;然后利用邻接矩阵描述报文类型之间的时序关系,基于时序关系进行协议状态标注,构建出协议的状态转换图。实验表明,该方法可以正确地描述出报文类型的时序关系,抽象出准确的状态机模型。Protocol state machine can describe the behavior of a protocol, which can help to understand the behavior logic of protocol. Oriented towards text protocols, a statistical method was firstly used to extract the semantic keyword of representative message type, and an adjacency matrix was used to describe the sequential relationship between the message types, based on which the protocol states were labeled and a state transition diagram was built. The experimental results show that the method can accurately describe the sequential relationship between the message types and abstract state machine model accurately.

关 键 词：协议逆向 协议语义 协议会话 协议状态机 邻接矩阵 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]