Protocol Reverse Engineering Based on DynamoRIO
Yongjun He, Hui Shu, Xiaobing Xiong · 2009
Research on Protocol Reverse Engineering is of great significance in network security applications. This paper firstly describes the existing Protocol Reverse Engineering technologies, and then detailedly analyses their advantages and disadvantages. Finally, a new approach of unknown Protocol reverse extraction based on DynamoRIO is proposed, adopting both dynamic binary analysis and dynamic taint analysis techniques to extract protocol format from the data flow information revealed by the protocol application while processing the protocol data.