{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,29]],"date-time":"2026-07-29T14:53:09Z","timestamp":1785336789741,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":44,"publisher":"ACM","license":[{"start":{"date-parts":[[2017,7,13]],"date-time":"2017-07-13T00:00:00Z","timestamp":1499904000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2017,7,13]]},"DOI":"10.1145\/3092282.3092289","type":"proceedings-article","created":{"date-parts":[[2017,7,13]],"date-time":"2017-07-13T13:45:49Z","timestamp":1499953549000},"page":"142-151","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":73,"title":["Model learning and model checking of SSH implementations"],"prefix":"10.1145","author":[{"given":"Paul","family":"Fiter\u0103u-Bro\u015ftean","sequence":"first","affiliation":[{"name":"Radboud University Nijmegen, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Toon","family":"Lenaerts","sequence":"additional","affiliation":[{"name":"Radboud University Nijmegen, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Erik","family":"Poll","sequence":"additional","affiliation":[{"name":"Radboud University Nijmegen, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joeri","family":"de Ruiter","sequence":"additional","affiliation":[{"name":"Radboud University Nijmegen, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Frits","family":"Vaandrager","sequence":"additional","affiliation":[{"name":"Radboud University Nijmegen, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick","family":"Verleg","sequence":"additional","affiliation":[{"name":"Radboud University Nijmegen, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2017,7,13]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-25150-9_11"},{"key":"e_1_3_2_1_2_1","unstructured":"Springer 165\u2013183.  Springer 165\u2013183."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10703-014-0216-x"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSTW.2013.60"},{"key":"e_1_3_2_1_5_1","volume-title":"LNCS","volume":"6415","author":"Aarts F.","unstructured":"F. Aarts , J. Schmaltz , and F. Vaandrager . 2010. Inference and Abstraction of the Biometric Passport. In Leveraging Applications of Formal Methods, Verification, and Validation . LNCS , Vol. 6415 . Springer, 673\u2013686. F. Aarts, J. Schmaltz, and F. Vaandrager. 2010. Inference and Abstraction of the Biometric Passport. In Leveraging Applications of Formal Methods, Verification, and Validation. LNCS, Vol. 6415. Springer, 673\u2013686."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.5"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1016\/0890-5401(87)90052-6"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/996943.996945"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3023357"},{"key":"e_1_3_2_1_10_1","unstructured":"E. Boss. 2012.  E. Boss. 2012."},{"key":"e_1_3_2_1_11_1","unstructured":"Evaluating implementations of SSH by means of model-based testing. Bachelor\u2019s Thesis. Radboud University.  Evaluating implementations of SSH by means of model-based testing. Bachelor\u2019s Thesis. Radboud University."},{"key":"e_1_3_2_1_12_1","unstructured":"S. Cassel F. Howar and B. Jonsson. 2015.  S. Cassel F. Howar and B. Jonsson. 2015."},{"key":"e_1_3_2_1_13_1","volume-title":"DIFTS","unstructured":"RALib : A LearnLib extension for inferring EFSMs . In DIFTS . http:\/\/www.faculty.ece.vt.edu\/chaowang\/difts2015\/ papers\/paper_5.pdf RALib: A LearnLib extension for inferring EFSMs. In DIFTS. http:\/\/www.faculty.ece.vt.edu\/chaowang\/difts2015\/ papers\/paper_5.pdf"},{"key":"e_1_3_2_1_14_1","volume-title":"Proc. USENIX workshop on Offensive Technologies (WOOT\u201914)","author":"Chalupar G.","year":"2014","unstructured":"G. Chalupar , S. Peherstorfer , E. Poll , and J. de Ruiter . 2014 . Automated Reverse Engineering using LEGO . In Proc. USENIX workshop on Offensive Technologies (WOOT\u201914) . 1\u201310. G. Chalupar, S. Peherstorfer, E. Poll, and J. de Ruiter. 2014. Automated Reverse Engineering using LEGO. In Proc. USENIX workshop on Offensive Technologies (WOOT\u201914). 1\u201310."},{"key":"e_1_3_2_1_15_1","unstructured":"H. Chen D. Dean and D. Wagner. 2004. Model Checking One Million Lines of C Code. In NDSS. The Internet Society. http:\/\/www.isoc.org\/isoc\/conferences\/ ndss\/04\/proceedings\/Papers\/Chen.pdf  H. Chen D. Dean and D. Wagner. 2004. Model Checking One Million Lines of C Code. In NDSS. The Internet Society. http:\/\/www.isoc.org\/isoc\/conferences\/ ndss\/04\/proceedings\/Papers\/Chen.pdf"},{"key":"e_1_3_2_1_16_1","volume-title":"CAV (LNCS)","volume":"2404","author":"Cimatti A.","unstructured":"A. Cimatti , E.M. Clarke , E. Giunchiglia , F. Giunchiglia , M. Pistore , M. Roveri , R. Sebastiani , and A. Tacchella . 2002. NuSMV 2: An OpenSource Tool for Symbolic Model Checking . In CAV (LNCS) , Vol. 2404 . Springer, 359\u2013364. A. Cimatti, E.M. Clarke, E. Giunchiglia, F. Giunchiglia, M. Pistore, M. Roveri, R. Sebastiani, and A. Tacchella. 2002. NuSMV 2: An OpenSource Tool for Symbolic Model Checking. In CAV (LNCS), Vol. 2404. Springer, 359\u2013364."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"crossref","unstructured":"P. Fiter\u0103u-Bro\u015ftean R. Janssen and F.W. Vaandrager. 2016. Combining Model Learning and Model Checking to Analyze TCP Implementations. In CAV\u201916 (LNCS) Vol. 9780. Springer 454\u2013471.  P. Fiter\u0103u-Bro\u015ftean R. Janssen and F.W. Vaandrager. 2016. Combining Model Learning and Model Checking to Analyze TCP Implementations. In CAV\u201916 (LNCS) Vol. 9780. Springer 454\u2013471.","DOI":"10.1007\/978-3-319-41540-6_25"},{"key":"e_1_3_2_1_18_1","unstructured":"A. Futoransky and E. Kargieman. 1998.  A. Futoransky and E. Kargieman. 1998."},{"key":"e_1_3_2_1_19_1","unstructured":"An attack on CRC-32 integrity checks of encrypted channels using CBC and CFB modes. Online. https:\/\/www.coresecurity.com\/system\/files\/publications\/2016\/05\/ KargiemanPacettiRicharte_1998-CRC32.pdf (1998).  An attack on CRC-32 integrity checks of encrypted channels using CBC and CFB modes. Online. https:\/\/www.coresecurity.com\/system\/files\/publications\/2016\/05\/ KargiemanPacettiRicharte_1998-CRC32.pdf (1998)."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.tcs.2010.07.008"},{"key":"e_1_3_2_1_21_1","unstructured":"M. Isberner. 2015.  M. Isberner. 2015."},{"key":"e_1_3_2_1_22_1","unstructured":"Foundations of Active Automata Learning\n  : \n  An Algorithmic Perspective\n  . Ph.D. Dissertation. \n  TU Dortmund\n  .  Foundations of Active Automata Learning: An Algorithmic Perspective. Ph.D. Dissertation. TU Dortmund."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/5.533956"},{"key":"e_1_3_2_1_24_1","unstructured":"T. Lenaerts. 2016.  T. Lenaerts. 2016."},{"key":"e_1_3_2_1_25_1","unstructured":"Improving Protocol State Fuzzing of SSH. Bachelor\u2019s Thesis. Radboud University.  Improving Protocol State Fuzzing of SSH. Bachelor\u2019s Thesis. Radboud University."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-13190-5_18"},{"key":"e_1_3_2_1_27_1","first-page":"225","article-title":"Black Box Checking","volume":"7","author":"Peled D.","year":"2002","unstructured":"D. Peled , M.Y. Vardi , and M. Yannakakis . 2002 . Black Box Checking . Journal of Automata, Languages, and Combinatorics 7 , 2 (2002), 225 \u2013 246 . D. Peled, M.Y. Vardi, and M. Yannakakis. 2002. Black Box Checking. Journal of Automata, Languages, and Combinatorics 7, 2 (2002), 225\u2013246.","journal-title":"Journal of Automata, Languages, and Combinatorics"},{"key":"e_1_3_2_1_28_1","unstructured":"E. Poll and A. Schubert. 2007. Verifying an implementation of SSH. In WITS\u201907. 164\u2013177.  E. Poll and A. Schubert. 2007. Verifying an implementation of SSH. In WITS\u201907. 164\u2013177."},{"key":"e_1_3_2_1_29_1","unstructured":"E. Poll and A. Schubert. 2011.  E. Poll and A. Schubert. 2011."},{"key":"e_1_3_2_1_30_1","volume-title":"Technical Report","author":"Transport Layer SSH","unstructured":"Rigorous specifications of the SSH Transport Layer . Technical Report . Radboud University . Rigorous specifications of the SSH Transport Layer. Technical Report. Radboud University."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10009-009-0111-8"},{"key":"e_1_3_2_1_32_1","unstructured":"J. de Ruiter and E. Poll. 2015. Protocol State Fuzzing of TLS Implementations. In USENIX Security. USENIX Association Washington D.C. 193\u2013206.   J. de Ruiter and E. Poll. 2015. Protocol State Fuzzing of TLS Implementations. In USENIX Security. USENIX Association Washington D.C. 193\u2013206."},{"key":"e_1_3_2_1_33_1","volume-title":"ICFEM 2015 (LNCS)","volume":"9407","author":"Smeenk W.","unstructured":"W. Smeenk , J. Moerman , D.N. Jansen , and F.W. Vaandrager . 2015. Applying Automata Learning to Embedded Control Software . In ICFEM 2015 (LNCS) , Vol. 9407 . W. Smeenk, J. Moerman, D.N. Jansen, and F.W. Vaandrager. 2015. Applying Automata Learning to Embedded Control Software. In ICFEM 2015 (LNCS), Vol. 9407."},{"key":"e_1_3_2_1_34_1","unstructured":"Springer 1\u201317.  Springer 1\u201317."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ic.2007.05.007"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2967606"},{"key":"e_1_3_2_1_37_1","unstructured":"P. Verleg. 2016.  P. Verleg. 2016."},{"key":"e_1_3_2_1_38_1","volume-title":"Master\u2019s thesis","author":"SSH","unstructured":"Inferring SSH state machines using protocol state fuzzing. Master\u2019s thesis . Radboud University . Inferring SSH state machines using protocol state fuzzing. Master\u2019s thesis. Radboud University."},{"key":"e_1_3_2_1_39_1","volume-title":"Network Traces: A Probabilistic Approach. In Applied Cryptography and Network Security. LNCS","author":"Wang Y.","year":"2011","unstructured":"Y. Wang , Z. Zhang , D. Yao , B. Qu , and L. Guo . 2011 . Inferring Protocol State Machine from Network Traces: A Probabilistic Approach. In Applied Cryptography and Network Security. LNCS , Vol. 6715 . Springer , 1\u201318. Y. Wang, Z. Zhang, D. Yao, B. Qu, and L. Guo. 2011. Inferring Protocol State Machine from Network Traces: A Probabilistic Approach. In Applied Cryptography and Network Security. LNCS, Vol. 6715. Springer, 1\u201318."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-25516-8_22"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"crossref","unstructured":"T. Ylonen and C. Lonvick. 2006. The Secure Shell (SSH) Authentication Protocol. RFC 4252 IETF Network Working Group. (2006).  T. Ylonen and C. Lonvick. 2006. The Secure Shell (SSH) Authentication Protocol. RFC 4252 IETF Network Working Group. (2006).","DOI":"10.17487\/rfc4252"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"crossref","unstructured":"T. Ylonen and C. Lonvick. 2006. The Secure Shell (SSH) Connection Protocol. RFC 4254 IETF Network Working Group. (2006).  T. Ylonen and C. Lonvick. 2006. The Secure Shell (SSH) Connection Protocol. RFC 4254 IETF Network Working Group. (2006).","DOI":"10.17487\/rfc4254"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"crossref","unstructured":"T. Ylonen and C. Lonvick. 2006. The Secure Shell (SSH) Protocol Architecture. RFC 4251 IETF Network Working Group. (2006).  T. Ylonen and C. Lonvick. 2006. The Secure Shell (SSH) Protocol Architecture. RFC 4251 IETF Network Working Group. (2006).","DOI":"10.17487\/rfc4251"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"crossref","unstructured":"T. Ylonen and C. Lonvick. 2006. The Secure Shell (SSH) Transport Layer Protocol. RFC 4253 IETF Network Working Group. (2006).  T. Ylonen and C. Lonvick. 2006. The Secure Shell (SSH) Transport Layer Protocol. RFC 4253 IETF Network Working Group. (2006).","DOI":"10.17487\/rfc4253"}],"event":{"name":"ISSTA '17: International Symposium on Software Testing and Analysis","location":"Santa Barbara CA USA","acronym":"ISSTA '17","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering"]},"container-title":["Proceedings of the 24th ACM SIGSOFT International SPIN Symposium on Model Checking of Software"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3092282.3092289","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3092282.3092289","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:03:08Z","timestamp":1750215788000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3092282.3092289"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,7,13]]},"references-count":44,"alternative-id":["10.1145\/3092282.3092289","10.1145\/3092282"],"URL":"https:\/\/doi.org\/10.1145\/3092282.3092289","relation":{},"subject":[],"published":{"date-parts":[[2017,7,13]]},"assertion":[{"value":"2017-07-13","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}