A message keyword extraction approach by accurate identification of field boundaries
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Goo, Young-Hoon | - |
dc.contributor.author | Shim, Kyu-Seok | - |
dc.contributor.author | Lee, Min-Seob | - |
dc.contributor.author | Kim, Myung-Sup | - |
dc.date.accessioned | 2021-12-07T18:41:46Z | - |
dc.date.available | 2021-12-07T18:41:46Z | - |
dc.date.created | 2021-08-30 | - |
dc.date.issued | 2021 | - |
dc.identifier.issn | 1055-7148 | - |
dc.identifier.uri | https://scholar.korea.ac.kr/handle/2021.sw.korea/130146 | - |
dc.description.abstract | With the recent exponential increase in internet speeds, the traditional network environment is evolving into a high-capacity network environment. Network traffic usage is also increasing exponentially, as are new malicious behaviors and related applications. Most of these applications and malicious behaviors use unknown protocols for which the structure is inaccessible; hence, protocol reverse engineering is receiving increasing attention in the field of network management. Various approaches have been proposed, but they still suffer from misidentification of field boundaries. To understand message structures properly, it is important to identify accurately the boundaries of the fields constituting the protocol message; accurate keyword extraction based on this approach leads to the correct inference of message types, semantics, and state machine. In this study, we propose a message keyword extraction method using accurate identification of field boundaries from delimiter inference and statistical analysis. Through the identification of field boundaries, messages can be subdivided into fields. We evaluate the efficacy of the proposed method by applying it to several textual and binary protocols. The proposed method showed better results than did other previous studies for both textual and binary protocols. | - |
dc.language | English | - |
dc.language.iso | en | - |
dc.publisher | WILEY | - |
dc.title | A message keyword extraction approach by accurate identification of field boundaries | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Kim, Myung-Sup | - |
dc.identifier.doi | 10.1002/nem.2140 | - |
dc.identifier.scopusid | 2-s2.0-85092128775 | - |
dc.identifier.wosid | 000575554100001 | - |
dc.identifier.bibliographicCitation | INTERNATIONAL JOURNAL OF NETWORK MANAGEMENT, v.31, no.4 | - |
dc.relation.isPartOf | INTERNATIONAL JOURNAL OF NETWORK MANAGEMENT | - |
dc.citation.title | INTERNATIONAL JOURNAL OF NETWORK MANAGEMENT | - |
dc.citation.volume | 31 | - |
dc.citation.number | 4 | - |
dc.type.rims | ART | - |
dc.type.docType | Article; Early Access | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalResearchArea | Telecommunications | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.relation.journalWebOfScienceCategory | Telecommunications | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
(02841) 서울특별시 성북구 안암로 14502-3290-1114
COPYRIGHT © 2021 Korea University. All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.