AUTOMATIC PROTOCOL TEST METHOD BY REVERSE ENGINEERING FROM PACKET TRACES TO EXTENDED FINITE STATE MACHINE

專利類型

發明

專利國別 (專利申請國家)

美國

專利申請案號

16/402,004

專利證號

US 10,892,974 B2

專利獲證名稱

AUTOMATIC PROTOCOL TEST METHOD BY REVERSE ENGINEERING FROM PACKET TRACES TO EXTENDED FINITE STATE MACHINE

專利所屬機關 (申請機關)

國立交通大學

獲證日期

2021/01/12

技術說明

通訊協議逆向工程有助於自動取得通訊協議的標準，並常被網路安全系統以及測試項目產生工具所使用。為了達到更好的準確性，通訊協議逆向工程需要同時擷取訊息交換的順序以及訊息的內容。 然而，現有的技術只著重在將訊息交換的順序轉換成一個有限狀態機而不考慮訊息的內容。擴展有限狀態機使每個狀態具有記憶體，狀態之間的交換也新增了對資料內容的條件，是一個常被用來表示資料內容流的方法。我們提出了一個新的方法，解析封包記錄檔並轉換成通訊協議的擴展有限狀態機。所提出的測試用例生成方法利用唯一輸入輸出技術來創建測試序列，並且可以通過搜索在轉換或狀態上觸發觸發的數據來產生測試數據。 This invention proposes a novel automated test case generation method for protocols implementation from only the network traces. To improve the operations, this invention infers the Extened Finite State Machine (EFSM) models of unknown protocol that capture not only the order of exchanging message (control flow aspect), but also the data being transmitted (data flow aspect) as intermediate result and then generate the set of conformance test cases which cover all states and transitions of models. The proposed protocol behavior inference method comprises: traces preprocessing, message type identification, EFSM construction and semantic deduction. The message type identification hybrids the keyword analysis approach and distance based approach to obtain the set of inputs and outputs. The EFSM construction is to derive the set of states and set of transitions of model. And finally semantic deduction that construct data guards from observed values and memories from the intra/inter messages dependencies. The proposed test case generation method leverage the Unique Input Output technique to create the test sequence and test data could be produced by searching the data which fires the trigger on transitions or states.

備註

連絡單位 (專責單位/部門名稱)

智慧財產權中心

連絡電話

03-5738251

網址