Abstract
In this work, the grammatical inference was applied to model network protocol specification as FSM from the network stream data. The original RPNI algorithm merges pairs of states of the prefix tree acceptor of the positive samples in a fixed order assuring consistency of the resulting automaton, which would get a over-generalization automaton. The proposals presented consist in the modification of RPNI algorithm by means of introducing heuristics about network feature that label merging states from the prefix tree acceptor to prevent state from merging excessively. Preliminary experiments done seem to show that the improvement over the original RPNI algorithm is more helpful for deriving the more general network protocol automaton.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Hingston, P.: A genetic algorithm for regular inference. In: Proc. Genetic and Evolutionary Computation Conf., San Francisco, USA, pp. 1299–1306 (2001)
Chomsky, N., Miller, G.A.: Pattern conception. Rapport technique. AFCRC-TN-5757 (ASTIA Document AD 110076) (1957)
Chodorowski, J., Miclet, L.: Applying grammatical inference in learning a language model for oral dialogue. In: Honavar, V.G., Slutzki, G. (eds.) ICGI 1998. LNCS (LNAI), vol. 1433, p. 102. Springer, Heidelberg (1998)
Oncina, J., Garcia, P.: Inferring regular languages in polynomial update time. Pattern recognition and image analysis: selected papers from the IVth Spanish Symposium, Granada, Spain, 49–61 (1990)
Parekh, R., Honavar, V.: Learning DFA from simple examples. In: Proc. Algorithmic Learning Theory, 8th International Workshop, Sendai, Japan, pp. 116–131 (1997)
Yin, H., Song, D., Manuel, E., Kruegel, C., Kirda, E.: Panorama: Capturing System-Wide Information Flow for Malware Detection and Analysis. In: ACM Conference on Computer and Communications Security, Alexandria, VA (October 2007)
Caballero, J., Song, D.: Polyglot: Automatic Extraction of Protocol Format using Dynamic Binary Analysis. In: ICCS 2007, pp. 317–329 (October 2007)
Comparetti, P.M., Wondracek, G., Kruegel, C., Kirda, E.: Prospex: Protocol Specification Extraction. In: IEEE Symposium on Security and Privacy, IEEE Computer Society Press, USA (May 2009)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2010 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Xiao, MM., Yu, SZ. (2010). Learning Automata Representation of Network Protocol by Grammar Induction. In: Wang, F.L., Gong, Z., Luo, X., Lei, J. (eds) Web Information Systems and Mining. WISM 2010. Lecture Notes in Computer Science, vol 6318. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-16515-3_28
Download citation
DOI: https://doi.org/10.1007/978-3-642-16515-3_28
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-16514-6
Online ISBN: 978-3-642-16515-3
eBook Packages: Computer ScienceComputer Science (R0)