APF-Kitty:基于单词嵌入的新型专有协议模糊测试工具

APF-Kitty: A New Fuzzer for Proprietary Protocol Based on Word Embedding

针对工业控制系统协议组成复杂,存在大量专有协议的特点,将协议逆向工程与模糊测试技术相结合。并针对传统多序列比对算法存在的问题,提出了利用单词嵌入进行协议逆向分析的新思路,并且通过开源模糊测试框架Kitty构造出新型的模糊测试工具APF-Kitty。通过实验分析证明了该方法可以有效地对专有协议进行逆向分析和模糊测试。最后,讨论了该方法存在的不足和下一步研究方向。

Aim at the protocol of the industrial control system is complex and have a large number of proprietary protocol, combined the reverse engineering and fuzzing. And aiming at the problems of traditional multiple sequence alignment algorithm, proposed a new method by using word embedding to reverse protocol. The new fuzzer APF-Kitty was constructed through the open source fuzzing test framework Kitty. Through the experimental analysis show that the method can recerse and fuzzing proprietary protocol effectively. Finally, the deficiency existed in the method and the future research direction were discussed.