![](/images/graphics-bg.png)
Capturing Uncertainty Information and Categorical Characteristics for Network Payload Grouping in Protocol Reverse Engineering
Joint Authors
Luo, Jian-Zhen
Yu, Shun-Zheng
Cai, Jun
Source
Mathematical Problems in Engineering
Issue
Vol. 2015, Issue 2015 (31 Dec. 2015), pp.1-9, 9 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2015-06-02
Country of Publication
Egypt
No. of Pages
9
Main Subjects
Abstract EN
As a promising tool to recover the specifications of unknown protocols, protocol reverse engineering has drawn more and more attention in research over the last decade.
It is a critical task of protocol reverse engineering to extract the protocol keywords from network trace.
Since the messages of different types have different sets of protocol keywords, it is an effective method to improve the accuracy of protocol keyword extraction by clustering the network payload of unknown traffic into clusters and analyzing each clusters to extract the protocol keywords.
Although the classic algorithms such as K-means and EM can be used for network payload clustering, the quality of resultant traffic clusters was far from satisfactory when these algorithms are applied to cluster application layer traffic with categorical attributes.
In this paper, we propose a novel method to improve the accuracy of protocol reverse engineering by applying a rough set-based technique for clustering the application layer traffic.
This technique analyze multidimension uncertain information in multiple categorical attributes based on rough sets theory to cluster network payload, and apply the Minimum Description Length criteria to determine the optimal number of clusters.
The experiments show that our method outperforms the existing algorithms and improves the results of protocol keyword extraction.
American Psychological Association (APA)
Luo, Jian-Zhen& Yu, Shun-Zheng& Cai, Jun. 2015. Capturing Uncertainty Information and Categorical Characteristics for Network Payload Grouping in Protocol Reverse Engineering. Mathematical Problems in Engineering،Vol. 2015, no. 2015, pp.1-9.
https://search.emarefa.net/detail/BIM-1075201
Modern Language Association (MLA)
Luo, Jian-Zhen…[et al.]. Capturing Uncertainty Information and Categorical Characteristics for Network Payload Grouping in Protocol Reverse Engineering. Mathematical Problems in Engineering No. 2015 (2015), pp.1-9.
https://search.emarefa.net/detail/BIM-1075201
American Medical Association (AMA)
Luo, Jian-Zhen& Yu, Shun-Zheng& Cai, Jun. Capturing Uncertainty Information and Categorical Characteristics for Network Payload Grouping in Protocol Reverse Engineering. Mathematical Problems in Engineering. 2015. Vol. 2015, no. 2015, pp.1-9.
https://search.emarefa.net/detail/BIM-1075201
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1075201