计算机应用 ›› 2015, Vol. 35 ›› Issue (5): 1373-1378.DOI: 10.11772/j.issn.1001-9081.2015.05.1373

• 信息安全 • 上一篇    下一篇

基于消息序列图的协议交互过程构建方法

石旺1,2, 杨英杰1,2, 唐慧林1,2, 董丽鹏1,2   

  1. 1. 信息工程大学, 郑州 450001;
    2. 河南省信息安全重点实验室, 郑州 450001
  • 收稿日期:2014-11-27 修回日期:2015-01-13 出版日期:2015-05-10 发布日期:2015-05-14
  • 通讯作者: 石旺
  • 作者简介:石旺(1987-),男,湖南湘潭人,助理工程师,硕士研究生,主要研究方向:网络与信息安全; 杨英杰(1971-),男,河南郑州人,副教授,博士,主要研究方向:网络与信息安全; 唐慧林(1980-),男,安徽安庆人,讲师,博士研究生,主要研究方向:信息安全; 董丽鹏(1987-),男,山西阳泉人,工程师,硕士研究生,主要研究方向:网络与信息安全.
  • 基金资助:

    国家973计划项目(2011CB311801);河南省科技创新人才计划项目(114200510001).

Building protocol interactive process based on message sequence chart

SHI Wang1,2, YANG Yingjie1,2, TANG Huilin1,2, DONG Lipeng1,2   

  1. 1. Information Engineering University, Zhengzhou Henan 450001, China;
    2. Henan Province Key Laboratory of Information Security, Zhengzhou Henan 450001, China
  • Received:2014-11-27 Revised:2015-01-13 Online:2015-05-10 Published:2015-05-14

摘要:

为了有效掌握协议的交互行为,提出一种基于消息序列图的协议交互过程自动构建方法.首先,根据协议交互过程的特点,定义依赖关系图来表示消息序列中事件的偏序关系,将网络流转换为依赖关系图;然后,使用基本消息序列描述协议的交互行为片段,通过定义事件最大后缀来挖掘基本消息序列;最后,搜索出最大依赖关系图并将其连接合并,构建出消息序列图.实验结果表明,该方法具有较高的准确性,构建出的消息序列图可以直观地表示协议的交互过程.

关键词: 消息序列图, 网络流, 依赖关系图, 事件最大后缀, 协议交互过程

Abstract:

In order to effectively master protocol interactive behavior, a method to automatically build protocol interactive process based on message sequence chart was proposed. Firstly, according to the characteristics of the protocol interactive process, the dependency graph was defined to represent the partial order of events in message sequence, and the network flows were converted to dependency graphs. Secondly, the basic message sequences were used to describe protocol interactive behavior fragments, and the basic message sequences were mined by defining event maximum suffix. Finally, the maximum dependency graphs that were found out were connected and merged to build a message sequence chart. The experimental results show that the proposed method has a high accuracy and the built message sequence chart can visually represent the protocol interactive process.

Key words: message sequence chart, network flow, dependency graph, event maximum suffix, protocol interactive process

中图分类号: