SPFuzz: A Hierarchical Scheduling Framework for Stateful Network Protocol Fuzzing

doi:10.1109/ACCESS.2019.2895025

2019-01-01

DOI：10.1109/ACCESS.2019.2895025

原文链接

查看原文

摘要

En 中文

In recent years, the fuzzing technology is widely used to detect the software vulnerabilities owing to the coverage improvement in the target program and the easiness of use. However, it is less efficient to fuzz the stateful protocols due to the difficulties like maintaining states and dependencies of messages. To address these challenges, we present SPFuzz, a framework for building flexible, coverage-guided stateful protocol fuzzing. We define a language in SPFuzz to describe the protocol specifications, protocol states transitions and dependencies for generating valuable test cases, maintaining correct messages in session states and handling protocol dependencies by updating message data in time. The SPFuzz adopts a three-level mutation strategy, namely head, content, and sequence mutation strategy to drive the fuzzing process to cover more paths, in conjunction with the method to randomly assign weights to messages and strategies. We use the following metrics to evaluate the performance of SPFuzz and other frameworks upon three protocol implementations, i.e., Proftpd, Oftpd, and OpenSSL, which are three-granularity coverages specifically function, basic block, and edge. In experiments, the SPFuzz framework outperforms the existing stateful protocol fuzzing tool Boofuzz by an average of 69.12% in three granularities coverage tests. This demonstrates that the SPFuzz has the ability to explore more and deeper paths of the target program. We further triggered CVE-2015-0291 in OpenSSL 1.0.2 with the SPFuzz, which proves the validity and utility of our framework.

Keyword:

AFL

coverage

fuzzing

network protocol

software security

AI总结

对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Access

IF:

3.6

论文数:

9.8W

被引数:

29.4W

机构

national university of defense technology - china

学者数:

1.8W

论文数: 1.4W

被引数: 9

引用论文

Crystallographic structure and magnetic properties of polycrystalline FePd thin films on glass substrate 玻璃衬底上多晶FePd薄膜的晶体结构和磁性能

Applied Physics A

IF0

2015-01-22

PREAI

S. H. Liu; C. C. Chen; S. N. Hsiao; S. K. Chen; Y. C. Chang; S. H. Su; K. F. Chiu

Kimberlite Terminology and Classification 金伯利岩术语和分类

Proceedings of 10th International Kimberlite Conference

IF0

2013-07-12

PREAI

B. H. Scott Smith; T. E. Nowicki; J. K. Russell; K. J. Webb; R. H. Mitchell; C. M. Hetman; M. Harder; E. M. W. Skinner; Jv. A. Robey

Central obesity, smoking habit, and hypertension are associated with lower antibody titres in response to COVID‐19 mRNA vaccine

Diabetes/Metabolism Research and Reviews

IF0

2021-05-11

OAAI

Mikiko Watanabe; Angela Balena; Dario Tuccinardi; Rossella Tozzi; Renata Risi; Davide Masi; Alessandra Caputi; Rebecca Rossetti; Maria Elena Spoltore; Valeria Filippi; Elena Gangitano; Silvia Manfrini; Stefania Mariani; Carla Lubrano; Andrea Lenzi; Claudio Mastroianni; Lucio Gnessi

Terrain attributes of earthquake‐ and rainstorm‐induced landslides in orogenic mountain Belt, Taiwan

Earth Surface Processes and Landforms

IF0

2017-02-19

PREAI

Jr‐Chuan Huang; John D. Milliman; Tsung‐Yu Lee; Yi‐Chin Chen; Jiin‐Fa Lee; Cheng‐Chien Liu; Jiun‐Chuan Lin; Shuh‐Ji Kao

Adaptation to visual feedback delays in a human manual tracking task

Experimental Brain Research

IF0

2000-03-01

PREAI

Alexander J. McC. Foulkes; R. Chris Miall