ReFormat: Automatic reverse engineering of encrypted messages

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5789 LNCS, Issue , 2009, Pages 200-215

  Wang, Zhi ^a   Jiang, Xuxian ^a   Cui, Weidong ^b   Wang, Xinyuan ^c   Grace, Mike ^a  

^a NORTH CAROLINA STATE UNIVERSITY   (United States)

^b MICROSOFT RESEARCH   (United States)

^c GEORGE MASON UNIVERSITY   (United States)

Author keywords

Data Lifetime Analysis; Encryption; Network Protocols; Reverse Engineering; Security

Indexed keywords

DATA LIFETIME ANALYSIS; ENCRYPTED MESSAGES; ENCRYPTION; LIFETIME ANALYSIS; MEMORY LOCATIONS; MESSAGE FORMAT; MESSAGE STRUCTURES; PROTOCOL PROCESSING; REAL-WORLD; RUNTIMES; SECOND PHASE; SECURITY; SECURITY APPLICATION; TWO PHASIS;

CRYPTOGRAPHY; INTERNET; NETWORK PROTOCOLS; REENGINEERING; REVERSE ENGINEERING; SECURITY SYSTEMS;

NETWORK SECURITY;

EID: 70350399651     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-04444-1_13     Document Type: Conference Paper

References (19)

1. Paxson, V.: Bro: A System for Detecting Network Intruders in Real-Time. Computer Networks 31(23-24), 2345-2463 (1999)
2. Wang, H.J., Guo, C., Simon, D.R., Zugenmaier, A.: Shield: Vulnerability-Driven Network Filters for Preventing Known Vulnerability Exploits. In: Proceedings of ACM SIGCOMM 2004, pp. 193-204 (2004)
3. Cui, W., Peinado, M., Wang, H.J., Locasto, M.: Shieldgen: Automatic Data Patch Generation for Unknown Vulnerabilities with Informed Probing. In: Proceedings of 2007 IEEE Symposium on Security and Privacy, Oakland, CA (May 2007)
4. The Protocol Informatics Project, http://www.baselineresearch.net/PI/
5. Caballero, J., Song, D.: Polyglot: Automatic Extraction of Protocol Format using Dynamic Binary Analysis. In: Proceedings of the 14th ACM Conference on Computer and and Communications Security, CCS 2007 (2007)
6. Cui, W., Kannan, J., Wang, H.J.: Discoverer: Automatic Protocol Reverse Engineering from Network Traces. In: Proceedings of the 16th USENIX Security Symposium (Security 2007), Boston, MA (August 2007)
7. Cui, W., Peinado, M., Chen, K., Wang, H.J., Irun-Briz, L.: Tupni: Automatic Reverse Engineering of Input Formats. In: Proceedings of the 15th ACM Conferences on Computer and Communication Security, CCS 2008 (October 2008)
8. Lin, Z., Jiang, X., Xu, D., Zhang, X.: Automatic Protocol Format Reverse Engineering Through Context-Aware Monitored Execution. In: Proceedings of the 15th Annual Network and Distributed System Security Symposium (NDSS 2008) (February 2008)
9. Wondracek, G., Comparetti, P.M., Kruegel, C., Kirda, E.: Automatic Network Protocol Analysis. In: Proceedings of the 15th Annual Network and Distributed System Security Symposium (NDSS 2008) (February 2008)
10. Comparetti, P.M., Wondracek, G., Kruegel, C., Kirda, E.: Prospex: Protocol Specification Extraction. In: Proceedings of 2009 IEEE Symposium on Security and Privacy, Oakland, CA (May 2009)
11. Chow, J., Pfaff, B., Christopher, K., Rosenblum, M.: Understanding Data Lifetime via Whole-System Simulation. In: Proceedings of the 13th USENIX Security Symposium, San Diego, CA (2004)
12. Newsome, J., Song, D.: Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software. In: Proceedings of the 14th Annual Network and Distributed System Security Symposium (NDSS 2005), San Diego, CA (February 2005)
13. SHTTP: An Embeddable Web Server, http://shttpd.sourceforge.net/
14. Know your Enemy: Tracking Botnets - Bot-Commands., http://www.honeynet. org/papers/bots/botnet-commands.html
15. Wang, Z., Jiang, X., Cui, W., Wang, X.: Reformat: Automatic Reverse Engineering of Encrypted Messages (Department of Computer Science Technical Report, North Carolina State University, TR-2008-26) (2008)
16. Ircd-hybrid - High Performance Internet Relay Chat, http://ircd-hybrid. com/
17. Cui, W., Paxson, V., Weaver, N., Katz, R.H.: Protocol-Independent Adaptive Replay of Application Dialog. In: Proceedings of the 13th Annual Network and Distributed System Security Symposium (NDSS 2006), San Diego, CA (February 2006)
18. Leita, C., Mermoud, K., Dacier, M.: ScriptGen: An Automated Script Generation Tool for Honeyd. In: Srikanthan, T., Xue, J., Chang, C.-H. (eds.) ACSAC 2005. LNCS, vol. 3740, pp. 203-214. Springer, Heidelberg (2005)
19. Chow, J., Pfaff, B., Garfinkel, T., Rosenblum, M.: Shredding Your Garbage: Reducing Data Lifetime through Secure Deallocation. In: Proceedings of the 14th USENIX Security Symposium, Baltimore, Maryland (2005)