{"id":"https://openalex.org/W4294672423","doi":"https://doi.org/10.1109/icccn54977.2022.9868903","title":"Automatic Field Extraction of Extended TLV for Binary Protocol Reverse Engineering","display_name":"Automatic Field Extraction of Extended TLV for Binary Protocol Reverse Engineering","publication_year":2022,"publication_date":"2022-07-01","ids":{"openalex":"https://openalex.org/W4294672423","doi":"https://doi.org/10.1109/icccn54977.2022.9868903"},"language":"en","primary_location":{"id":"doi:10.1109/icccn54977.2022.9868903","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icccn54977.2022.9868903","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 International Conference on Computer Communications and Networks (ICCCN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Zewen Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I212119943","display_name":"University of Victoria","ror":"https://ror.org/04s5mat29","country_code":"CA","type":"education","lineage":["https://openalex.org/I212119943"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Zewen Huang","raw_affiliation_strings":["University of Victoria,Department of Computer Science,B.C.,Canada","Department of Computer Science, University of Victoria, B.C., Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Victoria,Department of Computer Science,B.C.,Canada","institution_ids":["https://openalex.org/I212119943"]},{"raw_affiliation_string":"Department of Computer Science, University of Victoria, B.C., Canada","institution_ids":["https://openalex.org/I212119943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110101259","display_name":"Kui Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I212119943","display_name":"University of Victoria","ror":"https://ror.org/04s5mat29","country_code":"CA","type":"education","lineage":["https://openalex.org/I212119943"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Kui Wu","raw_affiliation_strings":["University of Victoria,Department of Computer Science,B.C.,Canada","Department of Computer Science, University of Victoria, B.C., Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Victoria,Department of Computer Science,B.C.,Canada","institution_ids":["https://openalex.org/I212119943"]},{"raw_affiliation_string":"Department of Computer Science, University of Victoria, B.C., Canada","institution_ids":["https://openalex.org/I212119943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054235059","display_name":"Shengqiang Huang","orcid":"https://orcid.org/0000-0001-9137-0178"},"institutions":[{"id":"https://openalex.org/I4210115038","display_name":"Huawei Technologies (Canada)","ror":"https://ror.org/026venb53","country_code":"CA","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210115038"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Shengqiang Huang","raw_affiliation_strings":["Huawei Technologies Canada Co. Ltd.,Burnaby,B.C.,Canada","Huawei Technologies Canada Co. Ltd., Burnaby, B.C., Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huawei Technologies Canada Co. Ltd.,Burnaby,B.C.,Canada","institution_ids":["https://openalex.org/I4210115038"]},{"raw_affiliation_string":"Huawei Technologies Canada Co. Ltd., Burnaby, B.C., Canada","institution_ids":["https://openalex.org/I4210115038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030808791","display_name":"Yang Zhou","orcid":"https://orcid.org/0000-0001-9057-6713"},"institutions":[{"id":"https://openalex.org/I4210115038","display_name":"Huawei Technologies (Canada)","ror":"https://ror.org/026venb53","country_code":"CA","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210115038"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Yang Zhou","raw_affiliation_strings":["Huawei Technologies Canada Co. Ltd.,Burnaby,B.C.,Canada","Huawei Technologies Canada Co. Ltd., Burnaby, B.C., Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huawei Technologies Canada Co. Ltd.,Burnaby,B.C.,Canada","institution_ids":["https://openalex.org/I4210115038"]},{"raw_affiliation_string":"Huawei Technologies Canada Co. Ltd., Burnaby, B.C., Canada","institution_ids":["https://openalex.org/I4210115038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056993180","display_name":"Ronnie Salvador Giagone","orcid":"https://orcid.org/0000-0002-7877-9531"},"institutions":[{"id":"https://openalex.org/I4210115038","display_name":"Huawei Technologies (Canada)","ror":"https://ror.org/026venb53","country_code":"CA","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210115038"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ronnie Salvador Giagone","raw_affiliation_strings":["Huawei Technologies Canada Co. Ltd.,Burnaby,B.C.,Canada","Huawei Technologies Canada Co. Ltd., Burnaby, B.C., Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huawei Technologies Canada Co. Ltd.,Burnaby,B.C.,Canada","institution_ids":["https://openalex.org/I4210115038"]},{"raw_affiliation_string":"Huawei Technologies Canada Co. Ltd., Burnaby, B.C., Canada","institution_ids":["https://openalex.org/I4210115038"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8084656000137329},{"id":"https://openalex.org/keywords/modbus","display_name":"Modbus","score":0.7110756039619446},{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.6596723794937134},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6413495540618896},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.5971842408180237},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.5470238327980042},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.54535311460495},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5393014550209045},{"id":"https://openalex.org/keywords/internet-protocol","display_name":"Internet Protocol","score":0.5295568108558655},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4837108254432678},{"id":"https://openalex.org/keywords/mqtt","display_name":"MQTT","score":0.4570912718772888},{"id":"https://openalex.org/keywords/internet-protocol-suite","display_name":"Internet protocol suite","score":0.4383714497089386},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.4329718351364136},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3402196764945984},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.22447535395622253},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.22183150053024292},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1938881278038025}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8084656000137329},{"id":"https://openalex.org/C2776666747","wikidata":"https://www.wikidata.org/wiki/Q1135322","display_name":"Modbus","level":3,"score":0.7110756039619446},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.6596723794937134},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6413495540618896},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5971842408180237},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.5470238327980042},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.54535311460495},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5393014550209045},{"id":"https://openalex.org/C35341882","wikidata":"https://www.wikidata.org/wiki/Q8795","display_name":"Internet Protocol","level":3,"score":0.5295568108558655},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4837108254432678},{"id":"https://openalex.org/C132868160","wikidata":"https://www.wikidata.org/wiki/Q10322548","display_name":"MQTT","level":3,"score":0.4570912718772888},{"id":"https://openalex.org/C65567647","wikidata":"https://www.wikidata.org/wiki/Q81414","display_name":"Internet protocol suite","level":3,"score":0.4383714497089386},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.4329718351364136},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3402196764945984},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.22447535395622253},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.22183150053024292},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1938881278038025},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icccn54977.2022.9868903","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icccn54977.2022.9868903","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 International Conference on Computer Communications and Networks (ICCCN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W77946476","https://openalex.org/W179510128","https://openalex.org/W1538375546","https://openalex.org/W2031926216","https://openalex.org/W2049867480","https://openalex.org/W2055228862","https://openalex.org/W2074231493","https://openalex.org/W2087064593","https://openalex.org/W2094116506","https://openalex.org/W2136696018","https://openalex.org/W2300751372","https://openalex.org/W2476715014","https://openalex.org/W2582379727","https://openalex.org/W3047947484","https://openalex.org/W6603227804","https://openalex.org/W6607214813","https://openalex.org/W6632460521"],"related_works":["https://openalex.org/W3151376044","https://openalex.org/W3116487262","https://openalex.org/W3005758431","https://openalex.org/W3127501640","https://openalex.org/W4382798777","https://openalex.org/W1990452682","https://openalex.org/W3162452525","https://openalex.org/W2381472228","https://openalex.org/W2368515717","https://openalex.org/W2365654523"],"abstract_inverted_index":{"Type":[0],"Length":[1],"Value":[2],"(TLV)":[3],"is":[4,23,43,80],"one":[5],"of":[6,18,38,75,89,121,128,159],"the":[7,26,30,47,72,87,113,119,149,174,179],"main":[8],"structures":[9],"commonly":[10],"used":[11],"in":[12,29,131,177],"network":[13,58],"protocols.":[14,181],"A":[15],"large":[16],"number":[17],"proprietary":[19],"protocols,":[20,85,134,163],"whose":[21],"specification":[22],"unknown":[24],"to":[25,45,71,123,146],"public,":[27],"run":[28],"current":[31],"Internet":[32,37],"as":[33,35,136,188],"well":[34],"domain-specific":[36],"Things":[39],"(IoT)":[40],"applications.":[41],"It":[42],"critical":[44],"infer":[46],"TLV":[48,68,90,115,122,152],"fields":[49,69,91,153,176],"within":[50],"a":[51,125,157,189],"packet":[52],"because":[53],"this":[54],"information":[55],"can":[56,169,184],"help":[57],"administrators":[59],"quickly":[60,172],"identify":[61,173],"abnormal":[62],"traffic":[63],"and":[64,79,106,140,171],"potential":[65],"attacks.":[66],"Inferring":[67],"belongs":[70],"general":[73,190],"task":[74],"protocol":[76,197],"reverse":[77,99,194],"engineering":[78,100,195],"particularly":[81],"challenging":[82],"for":[83,98,109,192],"binary":[84,101,133,196],"where":[86],"boundaries":[88],"have":[92],"many":[93,104],"possible":[94],"positions.":[95],"Existing":[96],"methods":[97],"protocols":[102,110],"involve":[103],"parameters":[105],"only":[107],"work":[108],"strictly":[111],"following":[112],"conventional":[114],"format.":[116,198],"We":[117,142],"extend":[118],"concept":[120],"accommodate":[124],"broader":[126],"category":[127],"structural":[129],"patterns":[130],"various":[132],"such":[135],"TCP,":[137],"IP,":[138],"ModBus,":[139],"MQTT.":[141],"then":[143],"design":[144],"algorithms":[145,168],"automatically":[147,193],"extract":[148],"extended":[150],"-":[151],"from":[154],"packets.":[155],"Via":[156],"series":[158],"experiments":[160],"over":[161],"several":[162],"we":[164],"demonstrate":[165],"that":[166],"our":[167],"accurately":[170],"extended-TLV":[175],"all":[178],"tested":[180],"Our":[182],"approach":[183],"thus":[185],"be":[186],"deployed":[187],"method":[191]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}