WHITEBOX NETWORK FUZZING

摘要

Software testing of networked devices using whitebox fuzzing is provided. Target network device (TC) can execute a software target that can selectively receive fuzzed data to perturb the execution of the software target. The perturbation can be correlated with the fuzzed data to detect intentional and unintentional features of the software target in. Information related to the interaction of the TC and a target network peer device (TPC) can be employed to determine a state input. Optionally, the TC can interact with the TPC normally until a determined state input, at which point, a fuzzed input can be substituted into the communication to the TC as if it were from the TPC. Resulting deviations from normal operation can then be determined and analyzed. Further optionally, a session dependent conditional and corresponding value can be determined.

主权项

1. A system comprising:
a processor; and a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising:
receiving compilable code that, when compiled, results in target executable code;determining, based on the compilable code, an Nth state of the target executable code, wherein N is an integer;executing the target executable code on a target device to the Nth state;performing an input to the target executable code for the Nth state;determining, in response to resuming execution of the target executable code subsequent to performing the input for the Nth state, a change in behavior of the target executable code as a result of employing the input for the Nth state; andenabling access to information related to the change in the behavior of the target executable code as a result of employing the input for the Nth state.