Internet communication protocols define the behavior rules of network components when they communicate with each other.With the continuous development of network technologies,many private or unknown network protocols ...Internet communication protocols define the behavior rules of network components when they communicate with each other.With the continuous development of network technologies,many private or unknown network protocols are emerging in endlessly various network environments.Herein,relevant protocol specifications become difficult or unavailable to translate in many situations such as network security management and intrusion detection.Although protocol reverse engineering is being investigated in recent years to perform reverse analysis on the specifications of unknown protocols,most existing methods have proven to be time-consuming with limited efficiency,especially when applied on unknown protocol state machines.This paper proposes a state merging algorithm based on EDSM(Evidence-Driven State Merging)to infer the transition rules of unknown protocols in form of state machines with high efficiency.Compared with another classical state machine inferring method based on Exbar algorithm,the experiment results demonstrate that our proposed method could run faster,especially when dealing with massive training data sets.In addition,this method can also make the state machines have higher similarities with the reference state machines constructed from public specifications.展开更多
在移动自组网(mobile ad hoc networks,简称MANET)中,节点的移动使无线链路经常发生断裂,从而导致路由无效.为了提高路由的稳定性,在分析单跳链路的t-时间维持概率的基础上,提出了一种基于路径t-时间维持概率的按需路由协议.该协议通过...在移动自组网(mobile ad hoc networks,简称MANET)中,节点的移动使无线链路经常发生断裂,从而导致路由无效.为了提高路由的稳定性,在分析单跳链路的t-时间维持概率的基础上,提出了一种基于路径t-时间维持概率的按需路由协议.该协议通过目的节点对路由请求的二次应答和中间节点对路由的反向优化来选择具有最大t-时间维持概率的路径,从而延长了路由的维持时间.仿真结果表明:与AODV(ad hoc on-demand distance vector)和DSR(dynamic source routing)等协议相比,该协议节省了协议开销,减小了分组的端到端时延.展开更多
基金This work is supported by the National Natural Science Foundation of China(Grant Number:61471141,61361166006,61301099)Basic Research Project of Shenzhen,China(Grant Number:JCYJ20150513151706561)National Defense Basic Scientific Research Program of China(Grant Number:JCKY2018603B006).
文摘Internet communication protocols define the behavior rules of network components when they communicate with each other.With the continuous development of network technologies,many private or unknown network protocols are emerging in endlessly various network environments.Herein,relevant protocol specifications become difficult or unavailable to translate in many situations such as network security management and intrusion detection.Although protocol reverse engineering is being investigated in recent years to perform reverse analysis on the specifications of unknown protocols,most existing methods have proven to be time-consuming with limited efficiency,especially when applied on unknown protocol state machines.This paper proposes a state merging algorithm based on EDSM(Evidence-Driven State Merging)to infer the transition rules of unknown protocols in form of state machines with high efficiency.Compared with another classical state machine inferring method based on Exbar algorithm,the experiment results demonstrate that our proposed method could run faster,especially when dealing with massive training data sets.In addition,this method can also make the state machines have higher similarities with the reference state machines constructed from public specifications.
基金Supported by the National Natural Science Foundation of China under Grant Nos.60472052 10577007 (国家自然科学基金)+2 种基金the Program for New Century Excellent Talents in University(新世纪优秀人才支持计划)the National Key Laboratory Foundation of National AntiInterference Communication Technology Laboratory UESTC under the Grant No.51434020105ZS04(国防科技重点实验室基金)
文摘在移动自组网(mobile ad hoc networks,简称MANET)中,节点的移动使无线链路经常发生断裂,从而导致路由无效.为了提高路由的稳定性,在分析单跳链路的t-时间维持概率的基础上,提出了一种基于路径t-时间维持概率的按需路由协议.该协议通过目的节点对路由请求的二次应答和中间节点对路由的反向优化来选择具有最大t-时间维持概率的路径,从而延长了路由的维持时间.仿真结果表明:与AODV(ad hoc on-demand distance vector)和DSR(dynamic source routing)等协议相比,该协议节省了协议开销,减小了分组的端到端时延.
