{
  "added_at": "2026-10-17",
  "arxiv_id": null,
  "arxiv_version_reviewed": null,
  "authors": [
    "Stephan Kleber",
    "Henning Kopp",
    "Frank Kargl"
  ],
  "bibtex_url": "https://awesomerea.org/papers/citations/paper-nemesys.bib",
  "code_url": "https://github.com/vs-uulm/nemesys",
  "date_basis": "The official USENIX BibTeX entry identifies August 2018 for the WOOT 18 workshop publication.",
  "date_basis_zh": "USENIX 官方 BibTeX 将 WOOT 18 研讨会论文的出版月份列为2018年8月。",
  "date_precision": "month",
  "description_en": "Infers approximate field boundaries within individual binary-protocol messages from changes in bit congruence, and introduces Format Match Score to compare inferred segmentation with known protocol dissectors.",
  "description_zh": "根据单条二进制协议报文内比特一致性的变化，推断近似字段边界，并提出格式匹配分数，将推断的分段结果与已知协议解析器进行比较。",
  "doi": null,
  "entry_url": "https://awesomerea.org/papers/paper-nemesys/",
  "entry_url_zh": "https://awesomerea.org/zh/papers/paper-nemesys/",
  "evidence_urls": [
    "https://www.usenix.org/conference/woot18/presentation/kleber",
    "https://www.usenix.org/system/files/conference/woot18/woot18-paper-kleber.pdf",
    "https://www.usenix.org/biblio/export/bibtex/220576",
    "https://github.com/vs-uulm/nemesys/blob/e98da1d9baa5727d8f085823369c733416b66a21/README.md",
    "https://github.com/vs-uulm/nemesys/blob/e98da1d9baa5727d8f085823369c733416b66a21/LICENSE"
  ],
  "first_arxiv_date": null,
  "id": "paper-nemesys",
  "json_url": "https://awesomerea.org/papers/paper-nemesys/record.json",
  "kind": "research",
  "markdown_url": "https://awesomerea.org/papers/paper-nemesys/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/papers/paper-nemesys/index.md",
  "metadata_notes": "The official USENIX citation verifies this workshop paper; no DOI or arXiv identifier was verified. The linked author repository now integrates NEMESYS with later NEMETYL and 2022 methods. Its README identifies it as experimental and its LICENSE declares MIT.",
  "metadata_notes_zh": "USENIX 官方引文确认了这篇研讨会论文；尚未核实 DOI 或 arXiv 标识。所链接的作者仓库如今整合了 NEMESYS、后续 NEMETYL 及2022年方法。README 将其定位为实验性软件，LICENSE 声明 MIT。",
  "pdf_url": "https://www.usenix.org/system/files/conference/woot18/woot18-paper-kleber.pdf",
  "project_url": null,
  "publication_date": "2018-08",
  "publication_status": "conference-paper",
  "record_type": "paper",
  "runtime_tested": false,
  "scope_limitations_en": "Requires plaintext payloads. Evaluation covers DNS, DHCP and NTP with protocol-tuned parameters. Single-byte fields are not inferred; zero-filled fields, character sequences and pseudo-random values can cause errors. FMS needs known field boundaries for validation. The output is approximate segmentation, not field semantics, a state machine or complete application/device behavior.",
  "scope_limitations_zh": "需要明文载荷。评测覆盖 DNS、DHCP 和 NTP，并针对各协议调节参数。方法无法推断单字节字段；全零字段、字符序列和伪随机值可能导致误差。FMS 验证需要已知字段边界。输出是近似报文分段，不是字段语义、状态机或完整应用／设备行为。",
  "targets": [
    "protocol"
  ],
  "title": "NEMESYS: Network Message Syntax Reverse Engineering by Analysis of the Intrinsic Structure of Individual Messages",
  "title_zh": "NEMESYS：通过分析单条报文的内在结构逆向推断网络报文语法",
  "url": "https://www.usenix.org/conference/woot18/presentation/kleber",
  "venue": "12th USENIX Workshop on Offensive Technologies (WOOT 18)",
  "verification": "source-reviewed",
  "verified_at": "2026-10-16",
  "why_fits_en": "Provides a foundational method for reconstructing wire-message structure from observed traffic.",
  "why_fits_zh": "为依据观测流量重建通信报文结构提供基础方法。",
  "year": 2018
}