{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:40:37Z","timestamp":1783438837631,"version":"3.54.6"},"reference-count":25,"publisher":"Wiley","license":[{"start":{"date-parts":[[2021,3,12]],"date-time":"2021-03-12T00:00:00Z","timestamp":1615507200000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2017YFB0801703"],"award-info":[{"award-number":["2017YFB0801703"]}]},{"name":"National Key Research and Development Program of China","award":["2017YFC1201204"],"award-info":[{"award-number":["2017YFC1201204"]}]},{"name":"National Key Research and Development Program of China","award":["NGII20170406"],"award-info":[{"award-number":["NGII20170406"]}]},{"name":"National Key Research and Development Program of China","award":["2242019R20024"],"award-info":[{"award-number":["2242019R20024"]}]},{"name":"National Key Research and Development Program of China","award":["LGG20F020014"],"award-info":[{"award-number":["LGG20F020014"]}]},{"name":"CERNET Innovation Project","award":["2017YFB0801703"],"award-info":[{"award-number":["2017YFB0801703"]}]},{"name":"CERNET Innovation Project","award":["2017YFC1201204"],"award-info":[{"award-number":["2017YFC1201204"]}]},{"name":"CERNET Innovation Project","award":["NGII20170406"],"award-info":[{"award-number":["NGII20170406"]}]},{"name":"CERNET Innovation Project","award":["2242019R20024"],"award-info":[{"award-number":["2242019R20024"]}]},{"name":"CERNET Innovation Project","award":["LGG20F020014"],"award-info":[{"award-number":["LGG20F020014"]}]},{"DOI":"10.13039\/501100008081","name":"Southeast University","doi-asserted-by":"publisher","award":["2017YFB0801703"],"award-info":[{"award-number":["2017YFB0801703"]}],"id":[{"id":"10.13039\/501100008081","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008081","name":"Southeast University","doi-asserted-by":"publisher","award":["2017YFC1201204"],"award-info":[{"award-number":["2017YFC1201204"]}],"id":[{"id":"10.13039\/501100008081","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008081","name":"Southeast University","doi-asserted-by":"publisher","award":["NGII20170406"],"award-info":[{"award-number":["NGII20170406"]}],"id":[{"id":"10.13039\/501100008081","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008081","name":"Southeast University","doi-asserted-by":"publisher","award":["2242019R20024"],"award-info":[{"award-number":["2242019R20024"]}],"id":[{"id":"10.13039\/501100008081","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008081","name":"Southeast University","doi-asserted-by":"publisher","award":["LGG20F020014"],"award-info":[{"award-number":["LGG20F020014"]}],"id":[{"id":"10.13039\/501100008081","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Zhejiang Province Public Welfare Research Project","award":["2017YFB0801703"],"award-info":[{"award-number":["2017YFB0801703"]}]},{"name":"Zhejiang Province Public Welfare Research Project","award":["2017YFC1201204"],"award-info":[{"award-number":["2017YFC1201204"]}]},{"name":"Zhejiang Province Public Welfare Research Project","award":["NGII20170406"],"award-info":[{"award-number":["NGII20170406"]}]},{"name":"Zhejiang Province Public Welfare Research Project","award":["2242019R20024"],"award-info":[{"award-number":["2242019R20024"]}]},{"name":"Zhejiang Province Public Welfare Research Project","award":["LGG20F020014"],"award-info":[{"award-number":["LGG20F020014"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security and Communication Networks"],"published-print":{"date-parts":[[2021,3,12]]},"abstract":"<jats:p>Industrial control protocol is the basis of communication and interaction of industrial control system, and its security is related to the whole industrial infrastructure. Because many industrial control systems use proprietary protocols, it is necessary to adopt protocol reverse analysis technology to parse them and then detect whether there are secure vulnerabilities in the protocols by means of fuzzy testing. However, most of the existing technologies are designed for common network protocols, and there is no improvement for industrial control protocol. Therefore, we propose a multistage ensemble reverse analysis method, namely, MSERA, which fully considers the design concept of industrial control protocols. MSERA divides the traditional reverse analysis process into three stages and identifies the fields with different semantic characteristics in different stages and combines with field rectification to effectively improve the results of reverse analysis of industrial control protocols. Through the experimental comparison of some public and proprietary industrial control protocols, it is found that MSERA not only outperforms Netzob in the accuracy of field split but also far exceeds Netzob in semantic recognition accuracy. The experimental results show that MSERA is very practical and suitable for reverse analysis of industrial control protocols.<\/jats:p>","DOI":"10.1155\/2021\/6690988","type":"journal-article","created":{"date-parts":[[2021,3,13]],"date-time":"2021-03-13T18:35:09Z","timestamp":1615660509000},"page":"1-11","source":"Crossref","is-referenced-by-count":12,"title":["A Practical Format and Semantic Reverse Analysis Approach for Industrial Control Protocols"],"prefix":"10.1155","volume":"2021","author":[{"given":"Qun","family":"Wang","sequence":"first","affiliation":[{"name":"Zhejiang Shuren University, Hangzhou, Zhejiang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhonghao","family":"Sun","sequence":"additional","affiliation":[{"name":"National Computer Network Emergency Response Technical Team, Coordination Center of China (CNCERT\/CC), Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhangquan","family":"Wang","sequence":"additional","affiliation":[{"name":"Zhejiang Shuren University, Hangzhou, Zhejiang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shiping","family":"Ye","sequence":"additional","affiliation":[{"name":"Zhejiang Shuren University, Hangzhou, Zhejiang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ziyi","family":"Su","sequence":"additional","affiliation":[{"name":"Zhejiang Shuren University, Hangzhou, Zhejiang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hao","family":"Chen","sequence":"additional","affiliation":[{"name":"China Telecom Jiangxi Branch Provincial Network Operation and Maintenance Department, Nanchang, Jiangxi, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9146-043X","authenticated-orcid":true,"given":"Chao","family":"Hu","sequence":"additional","affiliation":[{"name":"PLA Army Engineering University, Nanjing, Jiangsu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"311","reference":[{"key":"1","article-title":"Netzob documentation [EB\/OL]","author":"F. Guih\u00e9ry","year":"2014"},{"key":"2","article-title":"The protocol informatics project","author":"M. Beddoe","year":"2004"},{"key":"3","article-title":"Discoverer: automatic protocol reverse engineering from network traces","author":"W. Cui"},{"key":"4","first-page":"51","article-title":"Towards automated protocol reverse engineering using semantic information","author":"G. Bossert"},{"key":"5","first-page":"443","article-title":"Protocol reverse based on hierarchical clustering and probability alignment from network traces","author":"F. Meng"},{"key":"6","first-page":"398","article-title":"Using segment-based alignment to extract packet structures from network traces","author":"O. Esoul"},{"key":"7","first-page":"179","article-title":"Biprominer: automatic mining of binary protocol features","author":"Y. Wang"},{"key":"8","first-page":"1","article-title":"A semantics aware approach to automated reverse engineering unknown protocols","author":"Y. Wang"},{"key":"9","doi-asserted-by":"publisher","DOI":"10.1109\/mc.1984.1659158"},{"key":"10","doi-asserted-by":"crossref","article-title":"Exploiting intra-packet dependency for fine-grained protocol format inference","author":"Q. Huang","DOI":"10.1109\/IFIPNetworking.2015.7145325"},{"key":"11","doi-asserted-by":"publisher","DOI":"10.1155\/2016\/9161723"},{"key":"12","first-page":"50","article-title":"ASAP: automatic semantics-aware analysis of network payloads","author":"T. Krueger"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2013.01.013"},{"key":"14","first-page":"134","article-title":"Protocol formats reverse engineering based on association rules in wireless environment","author":"Y. Wang"},{"key":"15","first-page":"662","article-title":"Feature extraction optimization for bitstream communication protocol format reverse analysis","author":"X. Hei"},{"key":"16","first-page":"1139","article-title":"Automatic reverse engineering of unknown security protocols from network traces","author":"Y. Fan"},{"key":"17","doi-asserted-by":"publisher","DOI":"10.1145\/335191.335372"},{"key":"18","first-page":"110","article-title":"Prospex: protocol specification extraction","author":"P. M. Comparetti"},{"key":"19","doi-asserted-by":"publisher","DOI":"10.1080\/17445760.2019.1655740"},{"key":"20","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2016.02.015"},{"key":"21","first-page":"183","article-title":"Dissecting customized protocols: automatic analysis for customized protocols based on IEEE 802.15. 4","author":"K. Choi"},{"key":"22","doi-asserted-by":"publisher","DOI":"10.3724\/sp.j.1016.2011.00242"},{"issue":"4","key":"23","first-page":"1","article-title":"A fuzzy testing method of industrial control protocol based on reverse analysis","volume":"17","author":"H. X. Wang","year":"2019","journal-title":"Chinese Journal of Electric Power Information and Communication Technology"},{"issue":"3","key":"24","first-page":"99","article-title":"An automated fuzzy test scheme for application layer protocol","volume":"35","author":"G. H. Zhang","year":"2018","journal-title":"Chinese Journal of Microelectronics and Computer"},{"key":"25","doi-asserted-by":"publisher","DOI":"10.1016\/j.fmre.2020.12.001"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/6690988.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/6690988.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/6690988.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,3,13]],"date-time":"2021-03-13T18:35:20Z","timestamp":1615660520000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/scn\/2021\/6690988\/"}},"subtitle":[],"editor":[{"given":"Petros","family":"Nicopolitidis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"editor"}]}],"short-title":[],"issued":{"date-parts":[[2021,3,12]]},"references-count":25,"alternative-id":["6690988","6690988"],"URL":"https:\/\/doi.org\/10.1155\/2021\/6690988","relation":{},"ISSN":["1939-0122","1939-0114"],"issn-type":[{"value":"1939-0122","type":"electronic"},{"value":"1939-0114","type":"print"}],"subject":[],"published":{"date-parts":[[2021,3,12]]}}}