- author = "Patrick LaRoche and A. Nur Zincir-Heywood and Malcolm I. Heywood",
- title = "Protocol Discovery and Analysis via Live Interaction",
- booktitle = "Applications of Evolutionary Computing, EvoApplications2012: {EvoCOMNET}, {EvoCOMPLEX}, {EvoFIN}, {EvoGAMES}, {EvoHOT}, {EvoIASP}, {EvoNUM}, {EvoPAR}, {EvoRISK}, {EvoSTIM}, {EvoSTOC}",
- year = "2012",
- month = "11-13 " # apr,
- editor = "Cecilia {Di Chio} and Alexandros Agapitos and Stefano Cagnoni and Carlos Cotta and F. {Fernandez de Vega} and Gianni A. {Di Caro} and Rolf Drechsler and Aniko Ekart and Anna I Esparcia-Alcazar and Muddassar Farooq and William B. Langdon and Juan J. Merelo and Mike Preuss and Hendrik Richter and Sara Silva and Anabela Simoes and Giovanni Squillero and Ernesto Tarantino and Andrea G. B. Tettamanzi and Julian Togelius and Neil Urquhart and A. Sima Uyar and Georgios N. Yannakakis",
- series = "LNCS",
- volume = "7248",
- publisher = "Springer Verlag",
- address = "Malaga, Spain",
- pages = "11--20",
- keywords = "genetic algorithms, genetic programming",
- isbn13 = "978-3-642-29177-7",
-
DOI = "
doi:10.1007/978-3-642-29178-4_2",
- size = "10 pages",
- abstract = "In this work, we explore the use of evolutionary computing toward protocol analysis. The ability to discover, analyse, and experiment with unknown protocols is paramount within the realm of network security; our approach to this crucial analysis is to interact with a network service, discovering sequences of commands that do not result in error messages. In so doing, our work investigates the real-life responses of a service, allowing for exploration and analysis of the protocol in question. Our system initiates sequences of commands randomly, interacts with and learns from the responses, and modifies its next set of sequences accordingly. Such an exploration results in a set of command sequences that reflect correct uses of the service in testing. These discovered sequences can then be used to identify the service, unforeseen uses of the service, and, most importantly, potential weaknesses.",
-
notes = "FTP SMTP
Part of \cite{DiChio:2012:EvoApps} EvoApplications2012 held in conjunction with EuroGP2012, EvoCOP2012, EvoBio'2012 and EvoMusArt2012",
