Automated reverse network protocol analysis method

Abstract

The invention relates to the technical field of network communication and particularly relates to an automated reverse network protocol analysis method. The automated reverse network protocol analysis method comprises the following steps: S1, static communication information extraction: extracting key information among information loaded in communication of C / S-end monitored software and saving the key information to a log file; S2, dynamic protocol tracking and analysis: setting a breakpoint according to the key information and capturing log information related to packet transmitting and receiving functions of the monitored software through breakpoint analysis, analyzing the construction and parsing process of a network protocol packet of the C / S-end monitored software and saving an obtained result to the log file; and S3, information analysis: analyzing and organizing the log file to obtain a needed reverse analysis result. Through fully-automated reverse network protocol analysis, a target application can be completely analyzed and cracked, manpower and time are saved, and negligence and deficiency of artificial reverse analysis are compensated.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to an automatic reverse analysis method of a network protocol. Background technique [0002] With the wide application of the Internet in the world, the political, military, economic, social and other aspects of various countries are increasingly inseparable from computer networks. However, due to the fragility of network security, hacker attacks on the network are also increasing rapidly. As various network applications become more and more abundant, network penetration tools, unauthorized access, information theft, data destruction, denial of server attacks, spreading viruses and other means of network intrusion and destruction are becoming more and more advanced. Hackers often destroy and attack other people's systems to steal information through protocol loopholes, and use penetrating tools and anonymous communication tools to spread illegal information such as Tr...

AI Technical Summary

Problems solved by technology

However, due to the increasing complexity of existing network protocols, the protection of protocols and application software itself is becoming more and more stringent, and the reverse engineering of target network protocols consumes more and more time and manpower.

Images