AspFuzz: A state-aware protocol fuzzer based on application-layer protocols

Takahisa Kitagawa, Miyuki Hanaoka, Kenji Kono

研究成果: Conference contribution

20 被引用数 (Scopus)

抄録

In the face of constant malicious attacks to network-connected software systems, software vulnerabilities need to be discovered early in the development phase. In this paper, we present AspFuzz, a state-aware protocol fuzzer based on the specifications of application-layer protocols. AspFuzz automatically generates anomalous messages that exploit possible vulnerabilities. The key observation behind AspFuzz is that most of the previously reported attack messages violate the strict specifications of application-layer protocols. For example, they do not conform to the rigid format or syntax required of each message. In addition, some attack messages ignore the protocol states and have incorrect orders of messages. AspFuzz automatically generates a large number of anomalous messages that deliberately violate the specifications of application-layer protocols. It then sends the generated messages in both anomalous orders and correct orders. To demonstrate the effectiveness of AspFuzz, we conducted experiments with POP3 and HTTP servers. With AspFuzz, we can discover 20 reported and 1 previously unknown vulnerabilities for POP3 servers and 25 reported vulnerabilities for HTTP servers.

本文言語English
ホスト出版物のタイトルIEEE Symposium on Computers and Communications, ISCC 2010
ページ202-208
ページ数7
DOI
出版ステータスPublished - 2010 9月 17
イベント15th IEEE Symposium on Computers and Communications, ISCC 2010 - Riccione, Italy
継続期間: 2010 6月 222010 6月 25

出版物シリーズ

名前Proceedings - IEEE Symposium on Computers and Communications
ISSN(印刷版)1530-1346

Other

Other15th IEEE Symposium on Computers and Communications, ISCC 2010
国/地域Italy
CityRiccione
Period10/6/2210/6/25

ASJC Scopus subject areas

  • ソフトウェア
  • 信号処理
  • 数学 (全般)
  • コンピュータ サイエンスの応用
  • コンピュータ ネットワークおよび通信

フィンガープリント

「AspFuzz: A state-aware protocol fuzzer based on application-layer protocols」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。

引用スタイル