Search papers, labs, and topics across Lattice.
This paper addresses the limitations of handcrafted input alphabets in state machine learning for stateful protocol implementations by introducing an automated framework for input alphabet construction. By leveraging large language models to generate candidate input symbols through structured mutation rules, the approach enhances the exploration of both valid and invalid message spaces, thereby uncovering latent semantic defects. Experimental results demonstrate that the method not only replicates existing security vulnerabilities but also identifies novel bugs, some of which have been confirmed and patched by developers, highlighting its practical effectiveness.
Automated input alphabet generation reveals hidden semantic bugs in stateful protocols, leading to vulnerabilities that developers can patch.
As a prevalent analytical technique for stateful protocol implementations, state machine learning suffers from a core bottleneck stemming from handcrafted input alphabets. Manual alphabet definition inherently limits the completeness of input exploration, making it difficult to capture anomalous non-conformant messages and consequently missing latent semantic defects. In this paper, we target automatic input alphabet generation to break the above limitation for state machine learning. We adopt large language models to parse protocol message layouts and produce candidate input symbols following structured mutation rules, which automatically covers valid and invalid message spaces and eliminates reliance on manual protocol expertise. Considering the rising overhead brought by continuously growing alphabets, we introduce a mini-batch incremental learning strategy to reuse existing learned automata when incorporating new alphabet entries. Comprehensive experiments on practical protocol stacks indicate our approach can reproduce existing security vulnerabilities and identify novel semantic bugs. A subset of these newly discovered issues has been confirmed and patched by developers, proving the practicability and effectiveness of our proposed method.
