Learning Automata Representation Of Network Protocol By Grammar Induction

Ming-Ming Xiao,Shun-Zheng Yu
DOI: https://doi.org/10.1007/978-3-642-16515-3_28
2010-01-01
Abstract:In this work, the grammatical inference was applied to model network protocol specification as FSM from the network stream data. The original RPM algorithm merges pairs of states of the prefix tree acceptor of the positive samples in a fixed order assuring consistency of the resulting automaton, which would get a over-generalization automaton. The proposals presented consist in the modification of RPNI algorithm by means of introducing heuristics about network feature that label merging states from the prefix tree acceptor to prevent state from merging excessively. Preliminary experiments done seem to show that the improvement over the original RPNI algorithm is more helpful for deriving the more general network protocol automaton.
What problem does this paper attempt to address?