Abstract:Customizing program binary and communication features is a commonly adopted strategy to counter network security threats like session hijacking, context confusion, and impersonation attacks. A potential attacker may have enough time to launch an attack targeting these vulnerabilities by rerouting the target request to a malicious server or hijacking the traffic. This paper presents a novel system Verify-Pro, a framework for server authentication using communication protocol dialects by customizing the communication features, enforcing continuous authentication, detecting the adversary, and preventing sensitive information leakage. Specifically, we leverage a machine learning approach (pre-trained neural network model) on both client and server machines to trigger a specific dialect that dynamically changes for each request (e.g., get filename in FTP). Then, a decision tree algorithm is developed to automatically detect the adversary and terminate the entire session if the message is from an adversary. We implement a prototype of Verify-Pro and evaluate its practicality on standard communication protocol: FTP (File Transfer Protocol) and present a case study of the internet of things protocol MQTT (Message Queuing Telemetry Transport). Our experimental results show that by sending misleading information through the message packets from an attacker at the application layer, it is possible for the recipient to identify if the sender is genuine or a spoofed one, with a negligible overhead of < 1%.

Model-Based Testing of Networked Applications

Model Based Load Testing of Web Applications

Test oriented formal model of SDN applications

Model-based Runtime Verification Framework

Model Based Black-Box Testing of SDN Applications.

Network Protocol System Monitoring - A Formal Approach with Passive Testing

Testing Black-Box SDN Applications with Formal Behavior Models

Prognosis: Closed-Box Analysis of Network Protocol Implementations

Uncovering Unknown System Behaviors in Uncertain Networks with Model and Search-based Testing

A Model Based Framework for Testing Safety and Security in Operational Technology Environments

A Formal Method to Real-Time Protocol Interoperability Testing

Increasing dependability by means of model-based acceptance test inside RTOS

From Wireless Sensor Networks to Wireless Body Area Networks: Formal Modeling and Verification on Security Using PAT.

Verify-Pro: A Framework for Server Authentication Using Communication Protocol Dialects.

An Enhanced Passive Testing Tool for Network Protocols

Modeling and Testing of Network Protocols with Parallel State Machines.

Finding Security Vulnerabilities in Network Protocol Implementations

Integrated TCP/IP protocol software testing for vulnerability detection

A model-guided symbolic execution approach for network protocol implementations and vulnerability detection

A new formal test method for networked software integration testing

A Formal Approach to Robustness Testing of Network Protocol with Time Constraints