Network Protocol Reverse Parsing Based on Dynamic Binary Analysis
Xiong Xiao-bing · Jisuanji gongcheng · 2010
Research on unknown network protocol reverse parsing is of great significance in many network security applications.This paper describes the existing circumstances of protocol reverse extraction technologies,and analyses two main reverse extraction methods,one based on network trace and the other one on data flow analysis.A method based on dynamic binary analysis is presented,which aims at extracting the main protocol fields of a single message by using DynamoRIO platform to implement data flow recording and analyzing.