Endre søk
RefereraExporteraLink to record
Permanent link

Direct link
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
A Framework for Feedback-Enabled Blackbox Fuzzing Using Context-Free Grammars
KTH, Skolan för elektroteknik och datavetenskap (EECS), Datavetenskap, Nätverk och systemteknik.ORCID-id: 0000-0002-6265-2173
KTH, Skolan för elektroteknik och datavetenskap (EECS), Datavetenskap, Nätverk och systemteknik.ORCID-id: 0000-0002-3704-1338
2022 (engelsk)Rapport (Annet vitenskapelig)
Abstract [en]

For some 30 years, fuzzing has been a favored methodology for vulnerability discovery and robustness testing by researchers anddevelopers alike. Following the popularity of American Fuzzy Lop and the rise of coverage-guided fuzzing, many state-of-the-art fuzzersemploy heavy instrumentation, work best on small components and often require source code access. For networking equipmentsuch as switches and routers, this may not be feasible. If the software needs to run on or interact with specialized hardware, fuzzingthe equipment on a component level becomes very difficult. Heavy instrumentation may also degrade the performance of the SUTtoo much, thus invalidating the testing. Furthermore, the customers who buy the networking equipment often want to do their ownsecurity or robustness testing, but lack access to the source code.This paper details the design and usage of a grammar-based fuzzing framework and applies it to the Link Layer Discovery Protocol(LLDP), which is commonly used by industrial networking equipment. By modeling the fuzzing campaign as a multi-armed banditproblem, the grammar used to generate frames is able to adapt to observations made by lightweight probes, a novel concept accordingto the author’s knowledge.

sted, utgiver, år, opplag, sider
2022. , s. 19
Serie
TRITA-EECS-RP ; 2023:2
HSV kategori
Identifikatorer
URN: urn:nbn:se:kth:diva-323237OAI: oai:DiVA.org:kth-323237DiVA, id: diva2:1729911
Merknad

QC 20230123

Tilgjengelig fra: 2023-01-23 Laget: 2023-01-23 Sist oppdatert: 2023-01-23bibliografisk kontrollert

Open Access i DiVA

fulltext(544 kB)660 nedlastinger
Filinformasjon
Fil FULLTEXT01.pdfFilstørrelse 544 kBChecksum SHA-512
bde8c830cb0cc66aa09b3797a835f6be40368da336f7270c0701209e5c012d60a6715c4a02ae5b09fdcc7fbdbc1fbc9d4b6a93489178ca1a4e367b8305ba9e35
Type fulltextMimetype application/pdf

Person

Fernandez, LeonKarlsson, Gunnar

Søk i DiVA

Av forfatter/redaktør
Fernandez, LeonKarlsson, Gunnar
Av organisasjonen

Søk utenfor DiVA

GoogleGoogle Scholar
Totalt: 660 nedlastinger
Antall nedlastinger er summen av alle nedlastinger av alle fulltekster. Det kan for eksempel være tidligere versjoner som er ikke lenger tilgjengelige

urn-nbn

Altmetric

urn-nbn
Totalt: 869 treff
RefereraExporteraLink to record
Permanent link

Direct link
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf