The widespread utilization of network protocols raises many security and privacy concerns.
To address them, protocol reverse-engineering (PRE) has been broadly applied in diverse …

A network protocol defines rules that control communications between two or more
machines on the Internet, whereas Automatic Protocol Reverse Engineering (APRE) defines …

A botnet is a network of remote-controlled devices that are infected with malware controlled
by botmasters in order to launch cyber attacks. To evade detection, the botmaster frequently …

To evade detection, botnets apply DNS domain fluxing for Command and Control (C&C)
servers. In this way, each bot generates a large number of domain names with Domain …

Botnet is a part of the most destructive threats to network security and is often used in
malicious activities. DGA-based botnet, which uses Domain Generation Algorithm (DGA) to …

Protocol Reverse Engineering (PRE) is crucial for information security of Internet-of-Things
(IoT), and message clustering determines the effectiveness of PRE. However, the quality of …

With the rapid development of mobile networks, mobile traffic classification, a mapping of
mobile traffic to mobile applications, becomes more and more important for variant …

An IT system generates messages for other systems or users to consume, through direct
interaction or as system logs. Automatically identifying the types of these machine-generated …

Network protocol specification is essential in analyzing and evaluating network functionality,
performance, and security. However, increasing private protocols become a hindrance to …

An IT system generates messages for other systems or users to consume, through direct
interaction or as system logs. Being able to automatically identify the types of these machine …