netplier-tool / NetPlier

NetPlier: Probabilistic Network Protocol Reverse Engineering from Message Traces
GNU General Public License v3.0
58 stars 21 forks source link

factor graph #5

Open hotpotlover-yang opened 2 years ago

hotpotlover-yang commented 2 years ago

Using probability inference and factor graphs for keyword identification is a very creative idea,but there still have some questions i don't understand.About these two formulas,what did it means of f1,f2,...fm? And how is the joint probability distribution function derived? Why is it in fractional form?

image

yapengye commented 2 years ago

Hi @hotpotlover-yang , thanks for your interest!

fi is a probabilistic function which describes the valuation of an observation constraint or an inference constraint. In the probabilistic inference, we need to consider all the constraints. The conjunction of all constraints can be denoted as the product of all the corresponding probabilistic functions, i.e., f(k, x1, x2, ..., xn). The joint probability function p(k, x1, x2, ..., xn) is essentially the normalized version of f(k, x1, x2, ..., xn). The detailed definition of the joint probability function could be found in this paper.