Mining Protocol State Machines by Interactive Grammar Inference. Zhang, Z., Wen, Q., & Tang, W. In Digital Manufacturing and Automation (ICDMA), 2012 Third International Conference on, pages 524--527, July, 2012. 00002 bibtex: 6298571
doi  abstract   bibtex   
Protocol state machine is very essential in network security and implementation fields, however, improper management of software evolution, compounded by changing and imprecise requirements, along with "short time to market" phenomenon, often leads to a lack of up-to-date specifications and they are often characterized by bugs, anomalies and even threads. How to mine the accurate protocol state machine under investigation is still an open problem. We address this problem by using an interactive grammar inference technique as it could generate queries to the protocol implementation in learning process. This paper describes: (1) a flexible method to construct and parse real packet according to the packet format, (2) how to generate packet queries to explore protocol state machine space, (3) applies the QSM technology to mine protocol state machine from network traces. To access the usefulness of our approach, several experiments for different protocols are performed and we could get more objective and accurate results compared with other protocol specification mining methods.
@inproceedings{ zhang_mining_2012,
  title = {Mining {Protocol} {State} {Machines} by {Interactive} {Grammar} {Inference}},
  doi = {10.1109/ICDMA.2012.125},
  abstract = {Protocol state machine is very essential in network security and implementation fields, however, improper management of software evolution, compounded by changing and imprecise requirements, along with "short time to market" phenomenon, often leads to a lack of up-to-date specifications and they are often characterized by bugs, anomalies and even threads. How to mine the accurate protocol state machine under investigation is still an open problem. We address this problem by using an interactive grammar inference technique as it could generate queries to the protocol implementation in learning process. This paper describes: (1) a flexible method to construct and parse real packet according to the packet format, (2) how to generate packet queries to explore protocol state machine space, (3) applies the QSM technology to mine protocol state machine from network traces. To access the usefulness of our approach, several experiments for different protocols are performed and we could get more objective and accurate results compared with other protocol specification mining methods.},
  booktitle = {Digital {Manufacturing} and {Automation} ({ICDMA}), 2012 {Third} {International} {Conference} on},
  author = {Zhang, Zhao and Wen, Qiao-Yan and Tang, Wen},
  month = {July},
  year = {2012},
  note = {00002 bibtex: 6298571},
  keywords = {Active Learning, Educational institutions, Grammatical Inference, Inference algorithms, Protocol Modeling, Protocol State Machine, QSM technology, Software, Space exploration, Specification Mining, computer network security, data mining, interactive grammar inference, learning process, network security, network traces, packet format, packet queries, protocol specification mining methods, protocol state machines mining, protocols, security, short-time-to-market phenomenon, software evolution management},
  pages = {524--527}
}

Downloads: 0