@inproceedings{df9b9dab16ee435faba86720017bd17f,
title = "ArchInfer: An Automatic Protocol Format Inference Algorithm Based on Dynamic Program Analysis",
abstract = "Protocol reverse engineering is crucial in the face of numerous unknown protocols on the Internet. However, conventional protocol reverse engineering relies heavily on manual analysis, which is both inefficient and time-consuming. This paper proposes ArchInfer, a novel approach to infer the message field types of protocol terminal programs based on execution traces. We first introduce the concepts of logical locations and logical variables, and propose classification criteria for machine instructions. On this basis, we present the ArchInfer algorithm, which performs different operations based on instruction types to infer the types of logical variables. Experimental results using open-source terminal programs demonstrate that ArchInfer outperforms existing methods in both the accuracy and completeness of inferred message field types.",
keywords = "Binary analysis, Dynamic analysis, Protocol reverse engineering",
author = "Kehan Wang and Fanghui Sun and Tingyue Yu and Zihong Chen and Zhengze Wu and Shen Wang",
note = "Publisher Copyright: {\textcopyright} The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd. 2026.; 20th International Conference on Intelligent Information Hiding and Multimedia Signal Processing, IIHMSP 2024 is held in conjunction with the 19th International Symposium on Management Engineering, ISME 2024 ; Conference date: 04-10-2024 Through 06-10-2024",
year = "2026",
doi = "10.1007/978-981-96-6859-5\_8",
language = "英语",
isbn = "9789819668588",
series = "Smart Innovation, Systems and Technologies",
publisher = "Springer Science and Business Media Deutschland GmbH",
pages = "93--105",
editor = "Junzo Watada and Roumiana Kountcheva and Chin-Shiuh Shieh and Shu-Chuan Chu and Shih-Pang Tseng",
booktitle = "Advances in Intelligent Information Hiding and Multimedia Signal Processing - Proceedings of the 20th IIHMSP 2024 in Conjunction with the 19th ISME 2024",
address = "德国",
}