Matches in SemOpenAlex for { <https://semopenalex.org/work/W2898480265> ?p ?o ?g. }
Showing items 1 to 82 of
82
with 100 items per page.
- W2898480265 endingPage "565" @default.
- W2898480265 startingPage "551" @default.
- W2898480265 abstract "The knowledge of protocol specification, especially protocol field boundary, is invaluable for addressing many security problems, such as intrusion detection. But many industrial control network (ICN) protocols are closed. Closed protocol reverse engineering has often been a time-consuming, tedious and error-prone process. Some solutions have recently been proposed to allow for automatic protocol reverse engineering. But their prerequisites, e.g. assuming the existence of keywords or delimiters in protocol messages, limit the scope of their efforts to parse ICN protocol messages. In this paper, we present AutoBoundary that aims at automatically identifying field boundaries in an ICN protocol message. By instrumenting and monitoring program execution, AutoBoundary can obtain the execution context information, and build a memory propagation (MP) tree for each message byte. Based on the similarity between MP trees, AutoBoundary can identify protocol field boundaries, automatically. The intuition behind AutoBoundary makes it suitable for ICN protocols, which have the characteristics of no delimiter, no keyword, and no complex hierarchical structure in the message. We have implemented a prototype of AutoBoundary and evaluated it with 62 ICN protocol messages from 4 real-word ICN protocols. Our experimental results show that, for the ICN protocols whose fields are byte-aligned, AutoBoundary can identify field boundaries with high accuracy (100% for Modbus/TCP, 100% for Siemens S7, and 94.7% for ISO 9506)." @default.
- W2898480265 created "2018-11-02" @default.
- W2898480265 creator A5037575655 @default.
- W2898480265 creator A5043163029 @default.
- W2898480265 creator A5045751512 @default.
- W2898480265 creator A5082267036 @default.
- W2898480265 date "2018-01-01" @default.
- W2898480265 modified "2023-09-26" @default.
- W2898480265 title "Automatic Identification of Industrial Control Network Protocol Field Boundary Using Memory Propagation Tree" @default.
- W2898480265 cites W2016716561 @default.
- W2898480265 cites W2046640879 @default.
- W2898480265 cites W2049867480 @default.
- W2898480265 cites W2055228862 @default.
- W2898480265 cites W2056325176 @default.
- W2898480265 cites W2074231493 @default.
- W2898480265 cites W2080329164 @default.
- W2898480265 cites W2140839850 @default.
- W2898480265 cites W2141950720 @default.
- W2898480265 cites W2156453323 @default.
- W2898480265 cites W4239035626 @default.
- W2898480265 cites W4239813889 @default.
- W2898480265 doi "https://doi.org/10.1007/978-3-030-01950-1_32" @default.
- W2898480265 hasPublicationYear "2018" @default.
- W2898480265 type Work @default.
- W2898480265 sameAs 2898480265 @default.
- W2898480265 citedByCount "3" @default.
- W2898480265 countsByYear W28984802652021 @default.
- W2898480265 countsByYear W28984802652022 @default.
- W2898480265 crossrefType "book-chapter" @default.
- W2898480265 hasAuthorship W2898480265A5037575655 @default.
- W2898480265 hasAuthorship W2898480265A5043163029 @default.
- W2898480265 hasAuthorship W2898480265A5045751512 @default.
- W2898480265 hasAuthorship W2898480265A5082267036 @default.
- W2898480265 hasConcept C113174947 @default.
- W2898480265 hasConcept C116834253 @default.
- W2898480265 hasConcept C134306372 @default.
- W2898480265 hasConcept C142724271 @default.
- W2898480265 hasConcept C202444582 @default.
- W2898480265 hasConcept C204787440 @default.
- W2898480265 hasConcept C2780385302 @default.
- W2898480265 hasConcept C31258907 @default.
- W2898480265 hasConcept C33923547 @default.
- W2898480265 hasConcept C41008148 @default.
- W2898480265 hasConcept C59822182 @default.
- W2898480265 hasConcept C62354387 @default.
- W2898480265 hasConcept C71924100 @default.
- W2898480265 hasConcept C86803240 @default.
- W2898480265 hasConcept C9652623 @default.
- W2898480265 hasConceptScore W2898480265C113174947 @default.
- W2898480265 hasConceptScore W2898480265C116834253 @default.
- W2898480265 hasConceptScore W2898480265C134306372 @default.
- W2898480265 hasConceptScore W2898480265C142724271 @default.
- W2898480265 hasConceptScore W2898480265C202444582 @default.
- W2898480265 hasConceptScore W2898480265C204787440 @default.
- W2898480265 hasConceptScore W2898480265C2780385302 @default.
- W2898480265 hasConceptScore W2898480265C31258907 @default.
- W2898480265 hasConceptScore W2898480265C33923547 @default.
- W2898480265 hasConceptScore W2898480265C41008148 @default.
- W2898480265 hasConceptScore W2898480265C59822182 @default.
- W2898480265 hasConceptScore W2898480265C62354387 @default.
- W2898480265 hasConceptScore W2898480265C71924100 @default.
- W2898480265 hasConceptScore W2898480265C86803240 @default.
- W2898480265 hasConceptScore W2898480265C9652623 @default.
- W2898480265 hasLocation W28984802651 @default.
- W2898480265 hasOpenAccess W2898480265 @default.
- W2898480265 hasPrimaryLocation W28984802651 @default.
- W2898480265 hasRelatedWork W1500064003 @default.
- W2898480265 hasRelatedWork W1516169988 @default.
- W2898480265 hasRelatedWork W196405095 @default.
- W2898480265 hasRelatedWork W2049172720 @default.
- W2898480265 hasRelatedWork W2130966263 @default.
- W2898480265 hasRelatedWork W2363804782 @default.
- W2898480265 hasRelatedWork W2370697888 @default.
- W2898480265 hasRelatedWork W2373532818 @default.
- W2898480265 hasRelatedWork W2375403706 @default.
- W2898480265 hasRelatedWork W2562070253 @default.
- W2898480265 isParatext "false" @default.
- W2898480265 isRetracted "false" @default.
- W2898480265 magId "2898480265" @default.
- W2898480265 workType "book-chapter" @default.