SGPFuzzer: A State-Driven Smart Graybox Protocol Fuzzer for Network Protocol Implementations

被引：16

作者：

Yu, Yingchao ^{[1
]}

Chen, Zuoning ^{[2
]}

Gan, Shuitao ^{[1
]}

Wang, Xiaofeng ^{[3
]}

机构：

[1] State Key Lab Math Engn & Adv Comp, Wuxi 214083, Jiangsu, Peoples R China

[2] Chinese Acad Engn, Beijing 100088, Peoples R China

[3] Jiangnan Univ, Sch Artificial Intelligence & Comp Sci, Wuxi 214122, Jiangsu, Peoples R China

来源：

IEEE ACCESS | 2020年 / 8卷

基金：

中国国家自然科学基金;

关键词：

Protocols; Fuzzing; Computer bugs; Servers; Security; Tools; Stateful network protocol; graybox fuzzer; AFL; smart mutation; Boofuzz;

D O I：

10.1109/ACCESS.2020.3025037

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

As one of the most widely used technologies in software testing, fuzzing technology has been applied to network protocol vulnerability detection, and various network protocol fuzzers have been proposed. In this study, we first analyze and summarize some typical network protocol fuzzers to highlight the challenges when addressing stateful network protocol fuzzing. Then, a state-driven smart graybox protocol fuzzer (SGPFuzzer) is proposed to deal with these challenges. Finally, we evaluate SGPFuzzer on two widely used protocol implementations (LightFTP and tinyDTLS).The results show that SGPFuzzer outperforms Boofuzz and AFL in path coverage, unique crashes and the first time crash to crash, and it triggers a known bug which can't be trigged by the other two tools, fully proving its effectiveness and practicability.

引用

页码：198668 / 198678

页数：11

共 34 条

[1]

[Anonymous], 2005, Journal of Computing Sciences in Colleges

[2]

[Anonymous], 2020, AM FUZZY LOP AFL FUZ

[3] REDQUEEN: Fuzzing with Input-to-State Correspondence [J].

Aschermann, Cornelius ;

Schumilo, Sergej ;

Blazytko, Tim ;

Gawlik, Robert ;

Holz, Thorsten .

26TH ANNUAL NETWORK AND DISTRIBUTED SYSTEM SECURITY SYMPOSIUM (NDSS 2019), 2019,

[4]

Banks G, 2006, LECT NOTES COMPUT SC, V4176, P343

[5] Fast authentication in wireless sensor networks [J].

Benzaid, Chafika ;

Lounis, Karim ;

Al-Nemrat, Ameer ;

Badache, Nadjib ;

Alazab, Mamoun .

FUTURE GENERATION COMPUTER SYSTEMS-THE INTERNATIONAL JOURNAL OF ESCIENCE, 2016, 55 :362-375

[6] Coverage-Based Greybox Fuzzing as Markov Chain [J].

Bohme, Marcel ;

Van-Thuan Pham ;

Roychoudhury, Abhik .

IEEE TRANSACTIONS ON SOFTWARE ENGINEERING, 2019, 45 (05) :489-506

[7] Directed Greybox Fuzzing [J].

Bohme, Marcel ;

Van-Thuan Pham ;

Manh-Dung Nguyen ;

Roychoudhury, Abhik .

CCS'17: PROCEEDINGS OF THE 2017 ACM SIGSAC CONFERENCE ON COMPUTER AND COMMUNICATIONS SECURITY, 2017, :2329-2344

[8]

Bossert G., 2012, P ACT S SEC TECHN IN, P43

[9]

Fiterau-Brostean P, 2020, PROCEEDINGS OF THE 29TH USENIX SECURITY SYMPOSIUM, P2523

[10] CollAFL: Path Sensitive Fuzzing [J].

Gan, Shuitao ;

Zhang, Chao ;

Qin, Xiaojun ;

Tu, Xuwen ;

Li, Kang ;

Pei, Zhongyu ;

Chen, Zuoning .

2018 IEEE SYMPOSIUM ON SECURITY AND PRIVACY (SP), 2018, :679-696

← 1 2 3 4 →