Man Zhou 0006

dblp:165/8236-6 · DBLP profile ↗
← Back
5ranked-venue papers
3as first author
5since 2021 · last 2026
0009-0001-9687-1649ORCID · verified

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 3 · 2 first-author · 3 since 2021Systems, architecture and hardware · 1 · 1 first-author · 1 since 2021Computer networks · 1 · 1 since 2021
YearPublicationVenuePosition
2026 Functional Semantic Inference Method for Industrial Control Proprietary Protocol
abstract
Industrial control protocols (ICPs), especially proprietary protocols, lack public specifications due to security and commercial considerations, posing profound challenges for security audits and vulnerability detection. Although the function code fields in ICPs define critical operational semantics (e.g., PLC start/stop), existing protocol reverse engineering (PRE) methods struggle to accurately infer the functional implications of their value dependencies. To address this critical gap, we propose FuncSeinfer, an operation-traffic correlation-driven method for inferring functional semantics in proprietary ICPs by associating graphical user interface (GUI) operations of programming software with network traffic. FuncSeinfer first employs an entropy-based dynamic field extraction algorithm to generate candidate fields. Subsequently, it applies heuristic rules and clustering scoring rules to accurately infer function code fields. Finally, it identifies semantics through variance analysis of traffic marked with operational labels. We rigorously evaluated FuncSeinfer on 7 widely used ICPs (S7comm, UMAS-A, UMAS-B, Modbus, PCCC, Melsoft, and Fins) in 9 real-world PLCs from 5 leading manufacturers, achieving 100% accuracy in function code field inference, outperforming state-of-the-art PRE tools such as Netzob, FieldHunter, Netplier, and FSIBP. Furthermore, FuncSeinfer can accurately identify the semantic meaning of 78 function codes, which is an average improvement of 20.2% compared to Wireshark. This study fills the gap in functional semantics within ICP reverse engineering, enabling in-depth security analysis without requiring protocol specifications.
Yahui Yang, Yangyang Geng, Man Zhou 0006, Zhuo Lv, Liupeng He
IEEE Internet Things J.4
2025 Physical semantic inference method for industrial control proprietary protocol data fields
Yahui Yang, Yangyang Geng, Man Zhou 0006
Comput. Secur.4
2025 Strengthening edge defense: A differential game-based edge intelligence strategy against APT attacks
Man Zhou 0006, Lansheng Han
Comput. Secur.1
2025 Unmanned aerial vehicle swarm-assisted reliable federated learning for traffic flow prediction
Man Zhou 0006, Lansheng Han, Yangyang Geng
Future Gener. Comput. Syst.1
2024 Stealthy attack detection based on controlled invariant subspace for autonomous vehicles
Man Zhou 0006
Comput. Secur.1