Driftstörningar
Det förekommer återkommande driftstörningar på några av sök-portalerna på grund av hög belastning. Vi arbetar på att lösa problemet, ni kan tillfälligt mötas av ett felmeddelande.
Ändra sökning
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
NESFuzzer: Stateful Fuzz Testing of IoT Network Stacks
RISE Research Institutes of Sweden, Digitala system, Datavetenskap.ORCID-id: 0000-0003-3139-2564
Uppsala University, Uppsala, Sweden.
2025 (Engelska)Ingår i: International Conference on Embedded Wireless Systems and Networks, Junction Publishing , 2025Konferensbidrag, Publicerat paper (Refereegranskat)
Abstract [en]

Low-power IPv6 stacks are being used in a myriad of IoT networks, which makes it essential that they are secure. Fuzz testing has proven an invaluable method to discover vulnerabilities in software that take complex input, including protocol implementations. Still, fuzzing tools typically cannot test state-dependent parts of IoT network stacks. To bridge this gap, we design and implement NESFuzzer, a tool for stateful fuzzing of IoT network stacks. Unlike previous methods in this area, NESFuzzer enables stateful fuzzing while leveraging the techniques of existing coverage-guided and hybrid fuzzing tools such as MOpt and SymCC without modifications. This decoupling is made possible through a modular, network-based architecture in which the system being tested communicates with an external service to generate specific protocol states. We evaluate our work through a case study on the Contiki-NG operating system, and show that the test coverage increases by up to 170% in certain modules of the network stack. Using NESFuzzer, we have discovered four security vulnerabilities that could not be found with conventional fuzzing

Ort, förlag, år, upplaga, sidor
Junction Publishing , 2025.
Nyckelord [en]
embedded network stacks, fuzz testing, Internet of Things, stateful
Nationell ämneskategori
Datorsystem
Identifikatorer
URN: urn:nbn:se:ri:diva-81236Scopus ID: 2-s2.0-105031291883OAI: oai:DiVA.org:ri-81236DiVA, id: diva2:2048133
Konferens
22nd International Conference on Embedded Wireless Systems and Networks, EWSN 2025
Tillgänglig från: 2026-03-24 Skapad: 2026-03-24 Senast uppdaterad: 2026-03-24Bibliografiskt granskad

Open Access i DiVA

Fulltext saknas i DiVA

Scopus

Person

Tsiftes, Nicolas

Sök vidare i DiVA

Av författaren/redaktören
Tsiftes, Nicolas
Av organisationen
Datavetenskap
Datorsystem

Sök vidare utanför DiVA

GoogleGoogle Scholar

urn-nbn

Altmetricpoäng

urn-nbn
Totalt: 3 träffar
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf