RIoTFuzzer: Companion App Assisted Remote Fuzzing for Detecting Vulnerabilities in IoT Devices

被引：0
|
作者：
Liu, Kaizheng [1 ]
Yang, Ming [1 ]
Ling, Zhen [1 ]
Zhang, Yue [2 ]
Lei, Chongqing [1 ]
Luo, Junzhou [1 ]
Fu, Xinwen [3 ]
机构：
[1] Southeast University, Jiangsu, Nanjing, China
[2] Drexel University, Philadelphia,PA, United States
[3] UMass Lowell, Lowell,MA, United States
来源：
CCS 2024 - Proceedings of the 2024 ACM SIGSAC Conference on Computer and Communications Security |
基金：
中国国家自然科学基金;
关键词：
Black boxes - Cloud servers - Cloud-based - Fuzzing - [!text type='Java']Java[!/text] components - [!text type='Java']Java[!/text]script - LLM for security - Server sides - Side-channel - Vulnerability discovery;
D O I：
暂无
中图分类号：
学科分类号：
摘要：
50
引用
收藏
页码：2341 / 2354
相关论文
共 7 条
  • [1] Discovering Vulnerabilities in COTS IoT Devices through Blackbox Fuzzing Web Management Interface
    Wang, Dong
    Zhang, Xiaosong
    Chen, Ting
    Li, Jingwei
    SECURITY AND COMMUNICATION NETWORKS, 2019, 2019
  • [2] SHFuzz: Service handler-aware fuzzing for detecting multi-type vulnerabilities in embedded devices
    Li, Xixing
    Zhao, Lei
    Wei, Qiang
    Wu, Zehui
    Shi, Weiming
    Wang, Yunchao
    COMPUTERS & SECURITY, 2024, 138
  • [3] Tracking of Remote IoT Devices by Satellite Assisted Geolocation
    Hofmann, Christian A.
    Knopp, Andreas
    ICC 2020 - 2020 IEEE INTERNATIONAL CONFERENCE ON COMMUNICATIONS (ICC), 2020,
  • [4] Understanding and Detecting Remote Infection on Linux-based IoT Devices
    Li, Hongda
    Huang, Qiqing
    Ding, Fei
    Hu, Hongxin
    Cheng, Long
    Gu, Guofei
    Zhao, Ziming
    ASIA CCS'22: PROCEEDINGS OF THE 2022 ACM ASIA CONFERENCE ON COMPUTER AND COMMUNICATIONS SECURITY, 2022, : 873 - 887
  • [5] WESTWORLD: Fuzzing-Assisted Remote Dynamic Symbolic Execution of Smart Apps on IoT Cloud Platformsy
    Luo, Lannan
    Zeng, Qiang
    Yang, Bokai
    Zuo, Fei
    Wang, Junzhe
    37TH ANNUAL COMPUTER SECURITY APPLICATIONS CONFERENCE, ACSAC 2021, 2021, : 982 - 995
  • [6] Towards Automated Detection of Higher-Order Command Injection Vulnerabilities in IoT Devices: Fuzzing With Dynamic Data Flow Analysis
    Yu, Lei
    Wang, Haoyu
    Li, Linyu
    He, Houhua
    INTERNATIONAL JOURNAL OF DIGITAL CRIME AND FORENSICS, 2021, 13 (06)
  • [7] From One Thousand Pages of Specification to Unveiling Hidden Bugs: Large Language Model Assisted Fuzzing of Matter IoT Devices
    Ma, Xiaoyue
    Luo, Lannan
    Zeng, Qiang
    PROCEEDINGS OF THE 33RD USENIX SECURITY SYMPOSIUM, SECURITY 2024, 2024, : 4783 - 4800
1