arrow
返回

SGANFuzz: A Deep Learning-Based MQTT Fuzzing Method Using Generative Adversarial Networks

delete2024-01-01
delete1
delete
OA
AI
Z
Zhiqiang Wei *
X
Xijia Wei
X
Xinghua Zhao
Z
Zongtang Hu
X
Xu Chu
DOI:10.1109/ACCESS.2024.3365712delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
As the Internet of Things (IoT) industry grows, the risk of network protocol security threats has also increased. One protocol that has come under scrutiny for its security vulnerabilities is MQTT (Message Queuing Telemetry Transport), which is widely used. To address this issue, an automated execution program called fuzz has been developed to verify the security of MQTT brokers. This program is provided with various random and unexpected input data and monitored for different responses, such as acknowledgments, crashes, failures, or memory leaks. To generate a significant number of realistic MQTT protocols, we have proposed a Generative Adversarial Networks (GAN)-based protocol fuzzer called SGANFuzz. Our experimental results show that SGANFuzz has successfully detected 6 vulnerabilities among 7 MQTT implementations, including 3 CVE bugs. Compared to the state-of-the-art fuzzing tools, SGANFuzz has proven to be the most efficient fuzzing tool in terms of vulnerability detection and has expanded the feedback coverage by receiving more unique network responses from MQTT brokers.
Keyword:
MQTT
fuzz test
generative adversarial networks
time-series models
transformer
vulnerability detection

期刊

IEEE Access 封面图
IEEE Access
IF:
3.6
论文数:
9.8W
被引数:
29.4W

机构

C
China Mobile
学者数:
939
论文数: 701
被引数: 2
U
university of london
学者数:
21.5W
论文数: 19.7W
被引数: 305
引用论文

引用论文

err分享
err收藏
Calibrating the mental number line
err2008-03-01
err0
errOAAI
errVéronique Izard; Stanislas Dehaene
err分享
err收藏
Modulation of LINE-1 retrotransposition by a human SAMHD1 polymorphism
err2016-12-01
err0
errOAAI
errTommy E. White; Alberto Brandariz-Nuñez; Kyudong Han; Sara L. Sawyer; Baek Kim; Felipe Diaz-Griffero
err分享
err收藏
学者 查看更多内容