{
  "added_at": "2026-10-17",
  "arxiv_id": null,
  "arxiv_version_reviewed": null,
  "authors": [
    "Yapeng Ye",
    "Zhuo Zhang",
    "Fei Wang",
    "Xiangyu Zhang",
    "Dongyan Xu"
  ],
  "bibtex_url": "https://awesomerea.org/papers/citations/paper-netplier.bib",
  "code_url": "https://github.com/yapengye/NetPlier",
  "date_basis": "Publisher-deposited Crossref metadata supplies publication year 2021; the publisher PDF separately identifies the 21–25 February 2021 symposium.",
  "date_basis_zh": "出版方向 Crossref 提交的元数据仅给出出版年份2021；出版方 PDF 另列研讨会日期为2021年2月21—25日。",
  "date_precision": "year",
  "description_en": "Uses multiple sequence alignment and probabilistic keyword-field inference to cluster network messages by type, evaluated across ten protocols with downstream format and state-machine analysis.",
  "description_zh": "通过多序列比对与概率式关键字段推断，按类型对网络报文聚类，并在十种协议上评测及开展后续格式与状态机分析。",
  "doi": "10.14722/ndss.2021.24531",
  "entry_url": "https://awesomerea.org/papers/paper-netplier/",
  "entry_url_zh": "https://awesomerea.org/zh/papers/paper-netplier/",
  "evidence_urls": [
    "https://www.ndss-symposium.org/ndss-paper/netplier-probabilistic-network-protocol-reverse-engineering-from-message-traces/",
    "https://www.ndss-symposium.org/wp-content/uploads/ndss2021_4A-5_24531_paper.pdf",
    "https://api.crossref.org/works/10.14722/ndss.2021.24531",
    "https://github.com/yapengye/NetPlier/blob/78abbe67606c76fcd9bfec17667c662dce58f567/README.md",
    "https://github.com/yapengye/NetPlier/blob/78abbe67606c76fcd9bfec17667c662dce58f567/netplier/netplier.py",
    "https://github.com/yapengye/NetPlier/blob/78abbe67606c76fcd9bfec17667c662dce58f567/LICENSE"
  ],
  "first_arxiv_date": null,
  "id": "paper-netplier",
  "json_url": "https://awesomerea.org/papers/paper-netplier/record.json",
  "kind": "research",
  "markdown_url": "https://awesomerea.org/papers/paper-netplier/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/papers/paper-netplier/index.md",
  "metadata_notes": "The publisher paper cites netplier-tool/NetPlier, which now redirects to yapengye/NetPlier. The pinned GPLv3 artifact implements keyword inference and clustering evaluation; its core retains TODOs for iteration and format inference.",
  "metadata_notes_zh": "出版方论文引用 netplier-tool/NetPlier，当前重定向至 yapengye/NetPlier。固定提交下的 GPLv3 产物实现了关键字段推断与聚类评测；核心代码仍将迭代和格式推断列为 TODO。",
  "pdf_url": "https://www.ndss-symposium.org/wp-content/uploads/ndss2021_4A-5_24531_paper.pdf",
  "project_url": null,
  "publication_date": null,
  "publication_status": "conference-paper",
  "record_type": "paper",
  "runtime_tested": false,
  "scope_limitations_en": "Requires unencrypted traces and cannot recover unseen message types. Larger alignments, sub-byte keywords and one-way traffic can reduce accuracy. Format/FSM inference is downstream evaluation rather than the main contribution; state semantics in a case study were manually annotated. These models do not establish complete application/device reconstruction.",
  "scope_limitations_zh": "需要未加密的报文记录，无法恢复从未出现的报文类型。较大的比对、亚字节关键字段及单向流量可能降低准确性。格式／有限状态机推断属于下游评测而非主要贡献；一个案例中的状态语义由人工标注。这些模型不能证明已完整重建应用／设备。",
  "targets": [
    "protocol"
  ],
  "title": "NetPlier: Probabilistic Network Protocol Reverse Engineering from Message Traces",
  "title_zh": "NetPlier：基于报文记录的概率网络协议逆向工程",
  "url": "https://www.ndss-symposium.org/ndss-paper/netplier-probabilistic-network-protocol-reverse-engineering-from-message-traces/",
  "venue": "NDSS 2021",
  "verification": "source-reviewed",
  "verified_at": "2026-10-16",
  "why_fits_en": "Connects observed application/device traffic to message-type models needed for protocol reconstruction.",
  "why_fits_zh": "将观测到的应用／设备流量转化为协议重建所需的报文类型模型。",
  "year": 2021
}