面向比特流的链路层未知帧分析技术综述

Survey of Bit-stream Oriented Link-layer Unknown Frame Analysis Techniques

在日趋激烈的电子对抗领域,如何从通过侦察截获的通信比特流数据中分析识别出链路层未知帧成为了一个重要课题.当前各种协议解析工具已经发展的相当成熟,相关协议分析方法更是层出不穷,但是当遇到以比特为单位且链路层协议未知时,都无能为力.因此,该文从频繁序列统计、关联规则挖掘、链路帧切分到解析其他帧格式信息四个方面,归纳总结了目前为数不多的链路层未知帧分析识别研究方法及最新的研究成果,并进行了部分算法的实验验证,综合对比了各算法的优缺点,为今后研究工作提供参考.最后给出了研究所面临的挑战及后续工作展望.

In the increasingly fierce field of electronic warfare,how to identify the link-layer unknown frame of the communication bit- stream data intercepted by reconnaissance has become an important issue.The current protocol analysis tools have been developed particularly matured,and the relevant analysis methods is endless,but when it says to bit-stream data,and the link-layer frame format is unknown,it is incapable.Therefore,this article summarized the current few research methods on link-layer unknown frame analysis and the latest research results from the frequent sequence statistics,association rule mining,link frame segmentation to analysis other frame format information,and verified the some algorithm by experiment,compared the the advantages or disadvantages of algorithm,to provide reference for similar the future research.Finally,the challenges and following work of the research are presented.