• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.7 no.3
• /
• pp.576-599
• /
• 2013

Protocol reverse engineering is useful for many security applications, including intelligent fuzzing, intrusion detection and fingerprint generation. Since manual reverse engineering is a time-consuming and tedious process, a number of automatic techniques have been proposed. However, the accuracy of these techniques is limited due to the complexity of binary instructions, and the derived formats have missed constraints that are critical for security applications. In this paper, we propose a new approach for protocol format extraction. Our approach reasons about only the evaluation behavior of a program on the input message from concolic execution, and enables field identification and constraint inference with high accuracy. Moreover, it performs binary analysis with low complexity by reducing modern instruction sets to BIL, a small, well-specified and architecture-independent language. We have implemented our approach into a system called Icefex and evaluated it over real-world implementations of DNS, eDonkey, FTP, HTTP and McAfee ePO protocols. Experimental results show that our approach is more accurate and effective at extracting protocol formats than other approaches.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.7 no.4
• /
• pp.638-645
• /
• 2003

In existing internet, e-mail protocols including POP3 and IMAP4, provide e-mail services fir exchanging messages with texts, hypertext and images as well. For the e-mail services in wireless mobile network, mobile e-mail service providers have to install a mobile exclusive e-mail server or have to convert e-mail to mobile exclusive e-mail with wireless application format in case of POP3 protocol. In the e-mail service of IMAP4 case known as web-mail, it is difficult to view e-mail directly from server without IMAP4 mobile client because e-mail is stored in mail server side with remote file server. In either case, it also has the problems of viewing the e-mail of hypertext and image information at mobile. This paper provides e-mail extraction engine with image and hypertext conversion facilities that can be applied in wireless mobile internet and it is optimized in mobile communication environments such as a small display, small size of memory with web-mail protocol based on IMAP4 as well as POP3 mail protocol.

• Proceedings of the Korea Multimedia Society Conference
• /
• 2003.05b
• /
• pp.628-634
• /
• 2003

In existing internet, e-mail protocols including POP3 and IMAP4, provide e-mail services for exchanging messages with texts, hypertext and images as well. For the e-mail services in wireless mobile network, mobile e-mail service Providers have to install a mobile exclusive e-mail server or have to convert e-mail to mobile exclusive e-mail with wireless application format in case of POP3 protocol. In the e-mail service of IMAP4 case known as web-mail, It is difficult to view e-mail directly from server without IMAP4 mobile client because e-mail is stored in mail server side with remote file server. In either case, it also has the problems of viewing the e-mail of hypertext and image information at mobile, This Paper Provides e-mail extraction engine with image and hypertext conversion facilities that can be applied in wireless mobile internet and it is optimized In mobile communication environments such as a small display, small size of memory with web-mail protocol based on IMAP4 as well as POP3 mail protocol.