Leveraging State Information for Automated Attack Discovery in Transport Protocol Implementations

被引：15

作者：

Jero, Samuel ^{[1
]}

Lee, Hyojeong ^{[1
]}

Nita-Rotaru, Cristina ^{[1
]}

机构：

[1] Purdue Univ, W Lafayette, IN 47907 USA

来源：

2015 45TH ANNUAL IEEE/IFIP INTERNATIONAL CONFERENCE ON DEPENDABLE SYSTEMS AND NETWORKS | 2015年

基金：

美国国家科学基金会;

关键词：

D O I：

10.1109/DSN.2015.22

中图分类号：

TP301 [理论、方法];

学科分类号：

081202 ;

摘要：

We present a new method for finding attacks in unmodified transport protocol implementations using the specification of the protocol state machine to reduce the search space of possible attacks. Such reduction is obtained by appling malicious actions to all packets of the same type observed in the same state instead of applying them to individual packets. Our method requires knowledge of the packet formats and protocol state machine. We demonstrate our approach by developing SNAKE, a tool that automatically finds performance and resource exhaustion attacks on unmodified transport protocol implementations. SNAKE utilizes virtualization to run unmodified implementations in their intended environments and network emulation to create the network topology. SNAKE was able to find 9 attacks on 2 transport protocols, 5 of which we believe to be unknown in the literature.

引用

页码：1 / 12

页数：12

共 31 条

[21]

Paxson V., 1999, 2525 RFC

[22]

Postel J., 1980, RFC0768 USER DATAGRA

[23]

Postel J., 1981, IETF RFC, V793

[24]

Savage S., 1999, Computer Communication Review, V29, P71, DOI 10.1145/505696.505704

[25]

Touch Dr. Joseph D., 2007, 4953 RFC

[26]

Tsankov P., 2012, 2012 Proceedings of 7th International Workshop on Automation of Software Test (AST 2012), P1, DOI 10.1109/IWAST.2012.6228985

[27]

WANG JJ, 2013, 3 INT C INSTR MEAS C, P1129

[28]

Wang YP, 2011, LECT NOTES COMPUT SC, V6715, P1, DOI 10.1007/978-3-642-21554-4_1

[29]

Watson P. A., 2004, TECH REP

[30]

WebHosting Talk, 2004, DOS ATT HOST SEC TEC

← 1 2 3 4 →