Application-level protocol specifications are useful for many security applications, including intrusion prevention and detection that performs deep packet inspection and traffic normalization, and penetration testing that generates network inputs to an application to uncover potential vulnerabilities. However, current practice in deriving protocol specifications is mostly manual. This paper presents Discoverer, a tool for automatically reverse engineering the protocol message formats of an application from its network trace. A key property of Discoverer is that it operates in a protocol-independent fashion by inferring protocol idioms commonly seen in message formats of many application-level protocols.
Did you find this white paper useful?
23 out of 50 users found this white paper useful
Related white papers
IETF BEEP (RFC 3080) – a Framework for Next Generation Application Protocols
BEEP – The Blocks Extensible Exchange Protocol – is a new specification that provides a common set of services to help designers of application protocols. In the past, when designers...
SIP Architecture and Design
Session Initiation Protocol (SIP) is harnessing the power and openness of the Internet to revolutionize voice communications. This webcast explains the need for SIP and how organization can take full...
Viewers Choice: IPv6
Offered in response to viewer surveys, this webcast is devoted entirely to a deep technical exploration of the next generation of Internet Protocol. The presenters of this webcast will reveal...
Taridium Case Study: T4G
T4G Limited is a Microsoft Gold Certified Partner, the highest certification, with expertise in five different competencies: data management; custom development, advanced infrastructure; information worker and Microsoft Business Solutions (MBS)....
On-demand Webinar: Five Steps to Increasing Productivity and Profitability with Email Hosting
Many organizations are realizing significant gains in productivity and profitability with hosted email and mobile messaging services. What are some of the main benefits of hosted messaging and hosted Exchange?...
User Registration and Login Methods
Today, developers can choose among several different methods to allow users to register and gain access (login) to their Internet-based application. Although some are more popular than others, the method...
Cbeyond Inc. Improves Application Availability and Performance With Hosted Infrastructure
Cbeyond Inc. provides managed Internet Protocol (IP)-based communications services to small businesses in Atlanta, Chicago, Dallas, Denver, Houston, and Los Angeles. The challenge was to ensure the availability and performance...
