{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T16:51:05Z","timestamp":1791478265812,"version":"4.3.4"},"reference-count":66,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009,5]]},"DOI":"10.1109\/sp.2009.14","type":"proceedings-article","created":{"date-parts":[[2009,8,24]],"date-time":"2009-08-24T15:06:23Z","timestamp":1251126383000},"page":"110-125","source":"Crossref","is-referenced-by-count":196,"title":["Prospex: Protocol Specification Extraction"],"prefix":"10.1109","author":[{"given":"Paolo Milani","family":"Comparetti","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gilbert","family":"Wondracek","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christopher","family":"Kruegel","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Engin","family":"Kirda","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"35","doi-asserted-by":"crossref","DOI":"10.1007\/11836810_25","article-title":"snooze: toward a stateful network protocol fuzzer","author":"banks","year":"2006","journal-title":"Proceedings of the 9th Information Security Conference (ISC)"},{"key":"36","doi-asserted-by":"crossref","DOI":"10.1109\/MSP.2005.58","article-title":"a short visit to the bot zoo [malicious bots software]","volume":"3","author":"holz","year":"2005","journal-title":"Security & Privacy IEEE"},{"key":"33","doi-asserted-by":"publisher","DOI":"10.1145\/96267.96279"},{"key":"34","author":"sutton","year":"2007","journal-title":"Fuzzing Brute Force Vulnerability Discovery"},{"key":"39","year":"2008","journal-title":"X-Lite Softphone"},{"key":"37","year":"2008","journal-title":"RFC 3261 SIP Session Initiation Protocol"},{"key":"38","year":"2008","journal-title":"Asterisk The Open Source PBX and Telephony Platform"},{"key":"43","article-title":"a general objective for inductive inference","author":"wallace","year":"1983","journal-title":"Monash University Tech Rep"},{"key":"42","author":"venema","year":"2008","journal-title":"Postfix"},{"key":"41","year":"2008","journal-title":"The Linux Desktop Testing Project"},{"key":"40","year":"2008","journal-title":"Ekiga - Free your Speech"},{"key":"66","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4684-2001-2_9"},{"key":"22","article-title":"understanding data lifetime via whole system simulation","author":"chow","year":"2004","journal-title":"USENIX Security Symposium"},{"key":"23","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095824"},{"key":"24","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.26"},{"key":"25","article-title":"reformat: automatic reverse engineering of encrypted messages","author":"wang","year":"2008","journal-title":"NC State University Tech Rep 2008-26"},{"key":"26","doi-asserted-by":"publisher","DOI":"10.1016\/0022-2836(70)90057-4"},{"key":"27","doi-asserted-by":"publisher","DOI":"10.1111\/j.1469-8137.1912.tb05611.x"},{"key":"28","doi-asserted-by":"publisher","DOI":"10.1080\/01969727408546059"},{"key":"29","doi-asserted-by":"publisher","DOI":"10.1016\/S0031-3203(96)00127-6"},{"key":"3","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"2","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-35413-2_16"},{"key":"1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2005.55"},{"key":"7","article-title":"towards automatic discovery of deviations in binary implementations with applications to error detection and fingerprint generation","author":"brumley","year":"2007","journal-title":"USENIX Security Symposium"},{"key":"30","doi-asserted-by":"publisher","DOI":"10.1016\/S0019-9958(67)91165-5"},{"key":"6","article-title":"fig: automatic fingerprint generation","author":"venkataraman","year":"2007","journal-title":"Symposium on Network and Distributed System Security"},{"key":"5","article-title":"a generic application-level protocol analyzer and its language","author":"borisov","year":"2007","journal-title":"14th Symposium on Network and Distributed System Security (NDSS)"},{"key":"32","doi-asserted-by":"publisher","DOI":"10.1016\/S0019-9958(78)90562-4"},{"key":"4","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177119"},{"key":"31","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2004.03.027"},{"key":"9","article-title":"a multi-perspective analysis of the storm (peacomm) worm","author":"porras","year":"2007","journal-title":"Computer Laboratory Technical Report"},{"key":"8","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.44"},{"key":"59","doi-asserted-by":"publisher","DOI":"10.1016\/0890-5401(87)90052-6"},{"key":"58","doi-asserted-by":"publisher","DOI":"10.1145\/1047659.1040314"},{"key":"57","doi-asserted-by":"publisher","DOI":"10.1145\/1134285.1134325"},{"key":"56","doi-asserted-by":"publisher","DOI":"10.1145\/502039.502041"},{"key":"19","year":"2008","journal-title":"Peach Fuzzing Platform"},{"key":"55","doi-asserted-by":"publisher","DOI":"10.1145\/566171.566212"},{"key":"17","article-title":"automatic network protocol analysis","author":"wondracek","year":"2008","journal-title":"15th Symposium on Network and Distributed System Security (NDSS)"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455820"},{"key":"15","article-title":"polyglot: automatic extraction of protocol format using dynamic binary analysis","author":"caballero","year":"2007","journal-title":"14th ACM Conference on Computer and Communications Security (CCS)"},{"key":"16","article-title":"automatic protocol format reverse engineering through context-aware monitored execution","author":"lin","year":"2008","journal-title":"15th Symposium on Network and Distributed System Security (NDSS)"},{"key":"13","doi-asserted-by":"crossref","DOI":"10.1007\/11856214_10","article-title":"automatic handling of protocol dependencies and reaction to o-day attacks with scriptgen-based honeypots","author":"leita","year":"2006","journal-title":"Symposium on Recent Advances in Intrusion Detection (RAID)"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2005.49"},{"key":"11","article-title":"discoverer: automatic protocol reverse engineering from network traces","author":"cui","year":"2007","journal-title":"16th USENIX Security Symposium"},{"key":"12","article-title":"protocol-independent adaptive replay of application dialog","author":"cui","year":"2006","journal-title":"13th Symposium on Network and Distributed System Security (NDSS)"},{"key":"21","article-title":"faster algorithms for finding minimal consistent dfas","author":"lang","year":"1999","journal-title":"NEC Research Institute Tech Rep"},{"key":"20","author":"kaufman","year":"1990","journal-title":"Finding Groups in Data An Introduction to Cluster Analysis"},{"key":"64","article-title":"klee: unassisted and automatic generation of high-coverage tests for complex systems programs","author":"cadar","year":"2008","journal-title":"USENIX Symposium on Operating Systems Design and Implementation (OSDI)"},{"key":"65","article-title":"automatically generating malicious disks using symbolic execution","author":"yang","year":"2006","journal-title":"IEEE Security and Privacy"},{"key":"62","doi-asserted-by":"publisher","DOI":"10.1145\/1375581.1375607"},{"key":"63","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180445"},{"key":"60","doi-asserted-by":"crossref","DOI":"10.1145\/1081706.1081750","article-title":"cute: a concolic unit testing engine for c","author":"sen","year":"2005","journal-title":"ESEC\/FSE-13 Proceedings of the 10th European software engineering conference held jointly with 13th ACM SIGSOFT international symposium on Foundations of software engineering"},{"key":"61","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2008.109"},{"key":"49","doi-asserted-by":"crossref","DOI":"10.1007\/BFb0054059","article-title":"results of the abbadingo one dfa learning competition and a new evidence-driven state merging algorithm","author":"lang","year":"1998","journal-title":"ICGI 98 Proceedings of the 4th International Colloquium on Grammatical Inference"},{"key":"48","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2006.47"},{"key":"45","doi-asserted-by":"publisher","DOI":"10.1145\/565816.503275"},{"key":"44","article-title":"the sk-strings method for inferring pfsa","author":"patrick","year":"1997","journal-title":"Workshop on Automata Induction Grammatical Inference and Language Acquisition at the 14th International Conference on Machine Learning (ICML97)"},{"key":"47","year":"0","journal-title":"PFSA Toolkit"},{"key":"46","doi-asserted-by":"publisher","DOI":"10.1007\/BF01237940"},{"key":"10","year":"2008","journal-title":"Danmec \/ Asprox SQL Injection Attack Tool Analysis"},{"key":"51","year":"2007","journal-title":"Asterisk DOS Vulnerability"},{"key":"52","author":"fritzler","year":"2007","journal-title":"UnOfficial AIM\/OSCAR Protocol Specification"},{"key":"53","year":"2007","journal-title":"How Samba was Written"},{"key":"54","article-title":"the protocol informatics project","author":"beddoe","year":"2004","journal-title":"Toorcon"},{"key":"50","year":"2004","journal-title":"Potential Arbitrary File Access"}],"event":{"name":"2009 30th IEEE Symposium on Security and Privacy (SP)","location":"Oakland, CA, USA","start":{"date-parts":[[2009,5,17]]},"end":{"date-parts":[[2009,5,20]]}},"container-title":["2009 30th IEEE Symposium on Security and Privacy"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5207631\/5207632\/05207640.pdf?arnumber=5207640","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,18]],"date-time":"2017-06-18T23:05:05Z","timestamp":1497827105000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5207640\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,5]]},"references-count":66,"URL":"https:\/\/doi.org\/10.1109\/sp.2009.14","relation":{},"subject":[],"published":{"date-parts":[[2009,5]]}}}