摘要
从基于内容的应用协议分析技术出发,针对当前利用简单协议特征进行协议解析的识别准确率较差的情况进行改进,实现了一种基于状态自动机的应用协议分析方法。利用SmartBits6000C网络测试仪,基于MPC8572硬件平台进行试验,通过构建一个有限自动机来跟踪网络协议状态,并用由正则表达式产生的语言来描述一系列的正常的状态转移,从而提高了协议识别的准确性并有效减少了时间开销。
From the aspect of the application protocol analysis technique based on content characteristic,a protocol identification method is introduced,which improves the problems that the recognition accuracy is poor when simple protocol features are used to analysis protocols.Based on SmartBits6000C and MPC8572 platform,a finite automaton(FA) to follow the behavior of network protocal is proposed,and regular expression is used to describe a series of normal state transition of protocals analyzed,compared with simple characteristics method,it improves the accuracy of protocol identification and reduces the time consumption overhead.
出处
《电子测量技术》
2011年第12期109-112,共4页
Electronic Measurement Technology
关键词
协议分析
状态协议分析
自动机
protocol analysis
state protocol analysis
automaton