The Research And Application Of IM Protocols Analysis And Data Reconstruction Technology

IM (Instant Messaging) is a cost-effective integrated communication for the purpose of exchanging information in various formats (text, image, audio, video, etc.). With the technologies for identifying active users and information exchange, it achieves the same platform or cross-platform communication between the Internet and mobile communication platforms. In recent years, although a large number of new network services have emerged into the Internet, the IM service has been firmly ahead and maintained stable growth trend in all kinds of services. Specifically, for more than ten years development in China, IM has become one of the most extensive user coverage services and the most frequently used services of network.However, in order to gain enough user-base, the IM service provider each does things in his own way. And there is not any widely recognized protocol to this particular problem, which made the communications among the different IMs hardly. In terms of this situation, it has not only hindered the further development of IM, but also brought great barriers in the research and management of IM. Therefore, the research on generality of IM protocol has become an inevitable trend. IETF has developed several sets of standardized protocols currently, which are IMPP, Jabber/XMPP and SIP/SIMPLE.For my thesis, it describes the status of IM development and makes a prediction of the future trends firstly. Then, it gives a brief description of the standard protocols developed by IETF and analyses the framework and requirement of IMPP, inheritance and development of Jabber in XMPP, as well the works of SIMPLE on the extension in SIP. It also interprets that how SIMPLE and XMPP achieve the requirements of IMPP as well as the advantages and disadvantages of Jabber/XMPP and SIP/SIMPLE. After the collection of network traffic data of several popular IMs software, we summarized the data features and the reconstruction methods in standard and non-standard IM protocols. Finally, it presents the physical topology, logical structure as well as the process of the system which provides IM data identifying and reconstruction service, meanwhile has a detailed description of each logical module. As the result of the test by the system shown, most of the IM data which are unencrypted or decipherable can be identified and reconstructed.