kth.sePublications KTH
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
A Framework for Feedback-Enabled Blackbox Fuzzing Using Context-Free Grammars
KTH, School of Electrical Engineering and Computer Science (EECS), Computer Science, Network and Systems Engineering.ORCID iD: 0000-0002-6265-2173
KTH, School of Electrical Engineering and Computer Science (EECS), Computer Science, Network and Systems Engineering.ORCID iD: 0000-0002-3704-1338
2022 (English)Report (Other academic)
Abstract [en]

For some 30 years, fuzzing has been a favored methodology for vulnerability discovery and robustness testing by researchers anddevelopers alike. Following the popularity of American Fuzzy Lop and the rise of coverage-guided fuzzing, many state-of-the-art fuzzersemploy heavy instrumentation, work best on small components and often require source code access. For networking equipmentsuch as switches and routers, this may not be feasible. If the software needs to run on or interact with specialized hardware, fuzzingthe equipment on a component level becomes very difficult. Heavy instrumentation may also degrade the performance of the SUTtoo much, thus invalidating the testing. Furthermore, the customers who buy the networking equipment often want to do their ownsecurity or robustness testing, but lack access to the source code.This paper details the design and usage of a grammar-based fuzzing framework and applies it to the Link Layer Discovery Protocol(LLDP), which is commonly used by industrial networking equipment. By modeling the fuzzing campaign as a multi-armed banditproblem, the grammar used to generate frames is able to adapt to observations made by lightweight probes, a novel concept accordingto the author’s knowledge.

Place, publisher, year, edition, pages
2022. , p. 19
Series
TRITA-EECS-RP ; 2023:2
National Category
Software Engineering
Identifiers
URN: urn:nbn:se:kth:diva-323237OAI: oai:DiVA.org:kth-323237DiVA, id: diva2:1729911
Note

QC 20230123

Available from: 2023-01-23 Created: 2023-01-23 Last updated: 2023-01-23Bibliographically approved

Open Access in DiVA

fulltext(544 kB)652 downloads
File information
File name FULLTEXT01.pdfFile size 544 kBChecksum SHA-512
bde8c830cb0cc66aa09b3797a835f6be40368da336f7270c0701209e5c012d60a6715c4a02ae5b09fdcc7fbdbc1fbc9d4b6a93489178ca1a4e367b8305ba9e35
Type fulltextMimetype application/pdf

Authority records

Fernandez, LeonKarlsson, Gunnar

Search in DiVA

By author/editor
Fernandez, LeonKarlsson, Gunnar
By organisation
Network and Systems Engineering
Software Engineering

Search outside of DiVA

GoogleGoogle Scholar
Total: 652 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

urn-nbn

Altmetric score

urn-nbn
Total: 848 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf