论文部分内容阅读
简要介绍了协议逆向工程,提出协议逆向工程状态机推断部分存在的问题(即理想化地认为逆向结果是正确且完整的)。针对发现的问题,结合状态机推断的传统方法,提出状态机比对的解决方案并给出该解决方案的示例。该方案基于状态机状态转换的可比较性,通过用四元组表示状态转换并利用字符串相似度检测的方法对比状态机,获得状态机的原始信息。
A brief introduction of protocol reverse engineering is presented, and the problems existing in the inference part of the protocol reverse engineering state machine are proposed (ie, the ideal result is that the inverse result is correct and complete). Aiming at the problems found, combined with the traditional method of state machine inference, a solution of state machine comparison is proposed and an example of this solution is given. Based on the comparability of state machine state transitions, this scheme obtains the original information of the state machine by comparing the state machine with the quadruplet state transition and using the string similarity detection method.