Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
NESFuzzer: Stateful Fuzz Testing of IoT Network Stacks
RISE Research Institutes of Sweden, Digital Systems, Data Science.ORCID iD: 0000-0003-3139-2564
Uppsala University, Uppsala, Sweden.
2025 (English)In: International Conference on Embedded Wireless Systems and Networks, Junction Publishing , 2025Conference paper, Published paper (Refereed)
Abstract [en]

Low-power IPv6 stacks are being used in a myriad of IoT networks, which makes it essential that they are secure. Fuzz testing has proven an invaluable method to discover vulnerabilities in software that take complex input, including protocol implementations. Still, fuzzing tools typically cannot test state-dependent parts of IoT network stacks. To bridge this gap, we design and implement NESFuzzer, a tool for stateful fuzzing of IoT network stacks. Unlike previous methods in this area, NESFuzzer enables stateful fuzzing while leveraging the techniques of existing coverage-guided and hybrid fuzzing tools such as MOpt and SymCC without modifications. This decoupling is made possible through a modular, network-based architecture in which the system being tested communicates with an external service to generate specific protocol states. We evaluate our work through a case study on the Contiki-NG operating system, and show that the test coverage increases by up to 170% in certain modules of the network stack. Using NESFuzzer, we have discovered four security vulnerabilities that could not be found with conventional fuzzing

Place, publisher, year, edition, pages
Junction Publishing , 2025.
Keywords [en]
embedded network stacks, fuzz testing, Internet of Things, stateful
National Category
Computer Systems
Identifiers
URN: urn:nbn:se:ri:diva-81236Scopus ID: 2-s2.0-105031291883OAI: oai:DiVA.org:ri-81236DiVA, id: diva2:2048133
Conference
22nd International Conference on Embedded Wireless Systems and Networks, EWSN 2025
Available from: 2026-03-24 Created: 2026-03-24 Last updated: 2026-03-24Bibliographically approved

Open Access in DiVA

No full text in DiVA

Scopus

Authority records

Tsiftes, Nicolas

Search in DiVA

By author/editor
Tsiftes, Nicolas
By organisation
Data Science
Computer Systems

Search outside of DiVA

GoogleGoogle Scholar

urn-nbn

Altmetric score

urn-nbn
Total: 3 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf