arXiv:2604.03330cs.CRcs.AI2026-04中稿 · publication in IEE…

用AI检测IPv6协议合规性,能发现隐蔽违规通信。

AICCE: AI Driven Compliance Checker Engine

  • 结合检索增强生成与双架构推理,自动分析协议标准
  • 在16个生成模型上达99%准确率和F1值
  • 适合安全研究者和网络协议开发人员使用

为保障数字基础设施的安全、兼容与标准对齐,自动化通信协议合规性验证至关重要。然而,现有基于规则的系统因无法识别细微或复杂的不合规行为,正日益失效,而攻击者常利用此类漏洞建立隐蔽通信通道。本文提出人工智能驱动的合规检查引擎AICCE,一种新型生成式系统,融合双架构推理与检索增强生成(RAG)。通过将协议标准语义编码至高维向量空间,可高效检索与查询相关的规范片段。在此框架下,AICCE提供两条互补路径:(i) 可解释模式,利用并行大语言模型代理进行结构化讨论以提升决策可解释性与鲁棒性;(ii) 脚本执行模式,将条款转换为可快速执行的Python规则,实现全数据集范围的验证。辩论机制提升了复杂场景下的决策可靠性,脚本管道则显著降低单样本延迟。在十六个前沿生成模型的IPv6数据包测试中,AICCE达到最高99%的准确率与F1分数。结果表明,AICCE克服了传统规则系统盲点,提供可扩展、可审计、通用性强的动态通信环境非合规检测机制。

原文摘要 · Abstract (English)

For digital infrastructure to be safe, compatible, and standards-aligned, automated communication protocol compliance verification is crucial. Nevertheless, current rule-based systems are becoming less and less effective since they are unable to identify subtle or intricate non-compliance, which attackers frequently use to establish covert communication channels in IPv6 traffic. In order to automate IPv6 compliance verification, this paper presents the Artificial Intelligence Driven Compliance Checker Engine (AICCE), a novel generative system that combines dual-architecture reasoning and retrieval-augmented generation (RAG). Specification segments pertinent to each query can be efficiently retrieved thanks to the semantic encoding of protocol standards into a high-dimensional vector space. Based on this framework, AICCE offers two complementary pipelines: (i) Explainability Mode, which uses parallel LLM agents to render decisions and settle disputes through organized discussions to improve interpretability and robustness, and (ii) Script Execution Mode, which converts clauses into Python rules that can be executed quickly for dataset-wide verification. With the debate mechanism enhancing decision reliability in complicated scenarios and the script-based pipeline lowering per-sample latency, AICCE achieves accuracy and F1-scores of up to 99% when tested on IPv6 packet samples across sixteen cutting-edge generative models. By offering a scalable, auditable, and generalizable mechanism for identifying both routine and covert non-compliance in dynamic communication environments, our results show that AICCE overcomes the blind spots of conventional rule-based compliance checking systems.

协议检测AI安全IPv6RAG

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。