2026 · Journal article
Protocol Reverse Engineering via Deep Transfer Learning
Transfers field-boundary patterns from standardized protocol traces labeled by Tshark to poorly documented target protocols. A source-selection stage chooses related protocols, and a neural domain-adaptation model infers message syntax from their shared patterns.
Scope and limitations
Recovers message syntax, not state transitions. Evaluation uses 12 protocol variants; payload noise can distort source selection, while encrypted, compressed or obfuscated traffic needs separate preprocessing. Camera experiments supplement format metrics, but the four reported issues were vendor-known and do not establish complete protocol recovery.
Why it fits this collection
Adds a transfer-learning approach to recovering undocumented message formats without parser source code.
Publication and review details
- Venue
- Proceedings of the ACM on Software Engineering / FSE 2026
- Status
- Journal article
- Publication / posting date
- June 30, 2026
- Date source
- ACM-deposited Crossref print/online publication date; the author-hosted manuscript retains placeholder publication metadata.
- DOI
- 10.1145/3797124
June 2026 is a strong six-month-window supplement. Fulltext was read from the public PDF explicitly linked by coauthor Fuchen Ma; its February date and placeholder DOI are not used as final metadata. The publisher PDF previously returned 403. Crossref confirms nine authors, volume 3(FSE), pages 636–656 and CC BY 4.0 for the version of record. No author-linked implementation release or code license was verified; nothing was run.
Sources reviewed
Source review only; experiments were not rerun for this collection. Cite the original authors using the linked paper or BibTeX.