{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,11]],"date-time":"2026-04-11T13:16:20Z","timestamp":1775913380226,"version":"3.50.1"},"reference-count":45,"publisher":"IEEE","license":[{"start":{"date-parts":[[2024,5,20]],"date-time":"2024-05-20T00:00:00Z","timestamp":1716163200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,5,20]],"date-time":"2024-05-20T00:00:00Z","timestamp":1716163200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024,5,20]]},"DOI":"10.1109\/infocom52122.2024.10621405","type":"proceedings-article","created":{"date-parts":[[2024,8,12]],"date-time":"2024-08-12T17:25:41Z","timestamp":1723483541000},"page":"2408-2417","source":"Crossref","is-referenced-by-count":9,"title":["Reverse Engineering Industrial Protocols Driven By Control Fields"],"prefix":"10.1109","author":[{"given":"Zhen","family":"Qin","sequence":"first","affiliation":[{"name":"Zhejiang University,The College of Control Science and Engineering,Hangzhou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zeyu","family":"Yang","sequence":"additional","affiliation":[{"name":"Zhejiang University,The College of Control Science and Engineering,Hangzhou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yangyang","family":"Geng","sequence":"additional","affiliation":[{"name":"Information Engineering University,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xin","family":"Che","sequence":"additional","affiliation":[{"name":"Zhejiang University,The College of Control Science and Engineering,Hangzhou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tianyi","family":"Wang","sequence":"additional","affiliation":[{"name":"Zhejiang University,The College of Control Science and Engineering,Hangzhou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hengye","family":"Zhu","sequence":"additional","affiliation":[{"name":"Zhejiang University,The College of Control Science and Engineering,Hangzhou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peng","family":"Cheng","sequence":"additional","affiliation":[{"name":"Zhejiang University,The College of Control Science and Engineering,Hangzhou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiming","family":"Chen","sequence":"additional","affiliation":[{"name":"Zhejiang University,The College of Control Science and Engineering,Hangzhou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2021.11.009"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2945520"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3164723"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3384419.3430775"},{"key":"ref5","article-title":"ICSFuzz: Manipulating I\/Os and repurposing binary code to enable instrumented fuzzing in ICS control applications","volume-title":"USENIX Secur. Symp. (USENIX Security)","author":"Tychalas"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-09234-3_18"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2009.91"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3560905.3568521"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329828"},{"key":"ref10","article-title":"Boofuzz: Network Protocol Fuzzing for Humans","author":"Pereyda","year":"2020"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.116.2200034"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423356"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315286"},{"key":"ref14","article-title":"Automatic protocol format reverse engineering through context-aware monitored execution","volume-title":"Netw. Distrib. Syst. Secur. Symp. (NDSS)","author":"Lin"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1631\/FITEE.2000709"},{"key":"ref16","article-title":"SIMATIC NET Industrial Ethernet switches SCALANCE XB-200\/XC-200\/ XF-200BA\/XP-200\/XR-300WG Web Based Management Configuration Manual","year":"2019"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590346"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2012.6459963"},{"key":"ref19","article-title":"Discoverer: Automatic Protocol Reverse Engineering from Network Traces","volume-title":"USENIX Secur. Symp. (USENIX Security)","author":"Cui"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/BF02603120"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/QRS.2017.49"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155275"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1155\/2022\/8026280"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/6690988"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/IFIPNetworking.2015.7145307"},{"key":"ref26","doi-asserted-by":"crossref","DOI":"10.1109\/INFOCOM.2014.6848073","article-title":"ProWord: An unsupervised approach to protocol feature word extraction","volume-title":"Proc. Conf. Comput. Commun. (INFOCOM)","author":"Zhang"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1080\/17445760.2019.1655740"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24531"},{"key":"ref29","author":"Beale","year":"2006","journal-title":"Wireshark & Ethereal network protocol analyzer toolkit"},{"issue":"1","key":"ref30","first-page":"43","article-title":"A survey of binary similarity and distance measures","volume":"8","author":"Choi","year":"2010","journal-title":"J. Syst. Cybern. Inform."},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/s11265-021-01657-z"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.23919\/SOFTCOM.2018.8555813"},{"key":"ref33","article-title":"Modbus Application Protocol Specification, v1.1b3","author":"Organization","year":"2012"},{"key":"ref34","article-title":"A DNP3 Protocol Primer","year":"2005"},{"key":"ref35","article-title":"Supplemental Material of Submission #103","year":"2023"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-29814-6_23"},{"key":"ref37","article-title":"PLC-Sleuth: Detecting and Localizing PLC Intrusions Using Control Invariants","volume-title":"Proc. 23rd Int. Symp. Res. Attacks, Intrus. Defenses. (RAID)","author":"Yang"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3627106.3627179"},{"issue":"6","key":"ref39","first-page":"1095","article-title":"Network protocol analysis using bioinformatics algorithms","volume":"26","author":"Beddoe","year":"2004","journal-title":"Toorcon"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM48880.2022.9796964"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2019.00016"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3434581.3434686"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-9129-7_42"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP55882.2022.9940264"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.23131"}],"event":{"name":"IEEE INFOCOM 2024 - IEEE Conference on Computer Communications","location":"Vancouver, BC, Canada","start":{"date-parts":[[2024,5,20]]},"end":{"date-parts":[[2024,5,23]]}},"container-title":["IEEE INFOCOM 2024 - IEEE Conference on Computer Communications"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10621050\/10621073\/10621405.pdf?arnumber=10621405","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,13]],"date-time":"2024-08-13T05:29:31Z","timestamp":1723526971000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10621405\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5,20]]},"references-count":45,"URL":"https:\/\/doi.org\/10.1109\/infocom52122.2024.10621405","relation":{},"subject":[],"published":{"date-parts":[[2024,5,20]]}}}