| With the rapid development of Internet, a variety of network applications came to the world. As these applications are widely applied in many fields such as government departments, finance and E-commerce, the software security will influence the information security of its application in these fields. Analysis of network application protocols is an important means of ensuring the security of the software, therefore, it is of great significance to design and develop a tool for network protocol analysis. The main works of this paper is as follows:1. Based on a thorough analysis and comparison on the current network protocol analysis technology, we have discussed on the problem needed to be solved;2. It has designed and realized a network protocol analysis tool and introduced several basic modules of the tool. These modules include process selecting, network message selecting, binary code accessing and translating, protocol domains analyzing, the protocol state machine basic model extracting, vulnerability hinting;3. With the tool we developed, it has been tested some popular network software, such as QQ and MSN, and analyzed the corresponding result in detail. The result reveals that our tool is effective and applicable.The main innovation is proposing a new method of collecting the symbolic expressions automatically and using them for the network protocol analysis. This method can effectively solve the missing protocol information problem caused by lacking the program context. |
