Protocol Reverse-Engineering Methods and Tools: A Survey

Shu, Hui; Kang, Fei; Yang, Guang

doi:10.1016/j.comcom.2021.11.009

Cited by 23 publications

(4 citation statements)

References 44 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Protocol reverse engineering is a field that is still actively studied. New methods surface every year [20], some of them being reiterations of previous algorithms, some of them being completely new methods that are built on state-of-the-art applications such as machine learning. Some recent examples are an algorithm by Yang et al [29] that leverages deep learning, and another one by Wang et al [30] that employs convolutional neural networks.…”

Section: Related Workmentioning

confidence: 99%

On the Performance Evaluation of Protocol State Machine Reverse Engineering Methods

Ladi,

Holczer

2024

JCOMSS

View full text Add to dashboard Cite

Section: Related Workmentioning

confidence: 99%

On the Performance Evaluation of Protocol State Machine Reverse Engineering Methods

Ladi,

Holczer

2024

JCOMSS

View full text Add to dashboard Cite

“…Heuristic. By analyzing the design specifcations of most public industrial control protocols, we propose two types of protocol characteristics: inter and intra-message characteristics [7,19,29].…”

Section: Bw Generation Algorithmmentioning

confidence: 99%

“…Conversely, industrial control protocols have also become the focus of defense against these attacks [4][5][6]. However, because of commercial and security factors, most industrial control protocol specifcations are not open to the public [7,8]. Tese private industrial control protocols pose a challenge for protocol analysis.…”

Section: Introductionmentioning

confidence: 99%

IMCSA: Providing Better Sequence Alignment Space for Industrial Control Protocol Reverse Engineering

Huang

et al. 2022

Security and Communication Networks

View full text Add to dashboard Cite

Nowadays, with the wide application of industrial control facilities, industrial control protocol reverse engineering has significant security implications. The reverse method of industrial protocol based on sequence alignment is the current mainstream method because of its high accuracy. However, this method will incur a huge time overhead due to unnecessary alignments during the sequence alignment process. In this paper, we optimize the traditional sequence alignment method by combining the characteristics of industrial control protocols. We improve the frequent sequence mining algorithm, Apriori, to propose a more efficient Bag-of-Words generation algorithm for finding keywords. Then, we precluster the messages based on the generated Bag-of-Words to improve the similarity of the message within a cluster. Finally, we propose an industrial control protocol message preclustering model for sequence alignment, namely, IMCSA. We evaluate it over five industrial control protocols, and the results show that IMCSA can generate clusters with higher message similarity, which will greatly reduce the invalid alignments existing in the sequence alignment stage and ultimately improve the overall efficiency.

show abstract

“…Besides, such resources became useful crisis facing assets during virtual teaching sessions that occurred during COVID pandemic for instance [5]. On the other hand, in the framework of reverse engineering [17,20], being capable of analyzing mechanical and material properties of a system without damaging it is a required skill for future mechanical engineers aiming at sustainable development.…”

mentioning

confidence: 99%

Combining experiments, theory, and computer simulation: Application of dynamics analysis of unbalanced wheels rolling without sliding on horizontal paths

de Oliveira Cafiero,

Baldit,

Landier

et al. 2023

Comp Applic In Engineering

View full text Add to dashboard Cite

Rigid solid body dynamics is a key element of the undergraduate mechanical engineering curriculum. In a context of reverse engineering and/or sustainable development, being able to analyze the mechanical and material properties of a system without damaging it is a required skill. In this work, two systems based on wheels rolling over horizontal paths without sliding are studied: an unbalanced hollow cylinder and a wheel with displaced mass assembly. Four generations of last year's bachelor's students in mechanical engineering, representing a hundred people a year, followed a total of 12 h of practical sessions working on such systems. Without focusing on the programming part, this paper aims at showing how computer tools can help and improve a rigid solid body dynamics course. The objectives were to develop, apply, and analyze this teaching sequence, allowing students to (i) perform and characterize experimental measurements, (ii) establish systems motion equations, and (iii) think about dynamics results through cross‐talks between different techniques such as geometrical and analytical methods as well as computer‐assisted design tools. Different analysis methods of these systems could be discussed in the context of the classes, successfully bringing pertinent reflections to the students. The possibility of transferring such discussions to other contexts proved to be wide, thanks to computer science, dynamics software, other analysis methods and applications.

show abstract

Protocol Reverse-Engineering Methods and Tools: A Survey

Cited by 23 publications

References 44 publications

On the Performance Evaluation of Protocol State Machine Reverse Engineering Methods

On the Performance Evaluation of Protocol State Machine Reverse Engineering Methods

IMCSA: Providing Better Sequence Alignment Space for Industrial Control Protocol Reverse Engineering

Combining experiments, theory, and computer simulation: Application of dynamics analysis of unbalanced wheels rolling without sliding on horizontal paths

Contact Info

Product

Resources

About