A Novel Network Protocol Syntax Extracting Method for Grammar-Based Fuzzing

Author:

Li Huashan12,Zhang Lei12,Zhao Dawei12ORCID,Xu Lijuan12,Li Xin12,Yang Shumian12,Han Xiaohui3

Affiliation:

1. Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan), Qilu University of Technology (Shandong Academy of Sciences), Jinan 250014, China

2. Shandong Provincial Key Laboratory of Computer Networks, Shandong Fundamental Research Center for Computer Science, Jinan 250014, China

3. Quancheng Provincial Laboratory, Jinan 250014, China

Abstract

Network protocol syntax information plays a crucial role in grammar-based fuzzing. Current network protocol syntax extraction methods are less versatile, inefficient, and the extracted information is not comprehensive. This paper proposes a novel method for extracting syntax information, which innovatively extracts network protocol syntax from Wireshark protocol dissector files. The extracted syntax information includes packet types of the protocol, the constituent fields of each packet type, and detailed attributes of each field. Based on this method, an automated system for network protocol syntax information extraction was developed. The experiment was conducted with this system on a variety of protocols including DCCP, DNP3.0, Modbus TCP, and S7COMM. The experimental results show that compared with the current methods, our method has a better performance in terms of efficiency and versatility and at the same time ensures the comprehensiveness and accuracy of the extracted syntax information.

Funder

National Key R&D Program of China

Young Innovation Team of Colleages and Universities in Shandong Province

National Natural Science Foundation of China

Natural Science Foundation of Shandong Province

Innovation Ability Pormotion Project for Small and Medium-sized Technology-based Enterprise of Shandong Province

Talent Research Project of Qilu University of Technology

Pilot Project for Integrated Innovation of Science, Education and Industry of Qilu University of Technology

Taishan Scholars Program

Key Research Project of Quancheng Laboratory

“20 New Universities” Project of Jinan City

Publisher

MDPI AG

同舟云学术

1.学者识别学者识别

2.学术分析学术分析

3.人才评估人才评估

"同舟云学术"是以全球学者为主线,采集、加工和组织学术论文而形成的新型学术文献查询和分析系统,可以对全球学者进行文献检索和人才价值评估。用户可以通过关注某些学科领域的顶尖人物而持续追踪该领域的学科进展和研究前沿。经过近期的数据扩容,当前同舟云学术共收录了国内外主流学术期刊6万余种,收集的期刊论文及会议论文总量共计约1.5亿篇,并以每天添加12000余篇中外论文的速度递增。我们也可以为用户提供个性化、定制化的学者数据。欢迎来电咨询!咨询电话:010-8811{复制后删除}0370

www.globalauthorid.com

TOP

Copyright © 2019-2024 北京同舟云网络信息技术有限公司
京公网安备11010802033243号  京ICP备18003416号-3