Saved in:
| Main Authors: | , , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | https://arxiv.org/abs/2409.02905 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866909333579628544 |
|---|---|
| author | Rashid, Syed Md Mukit Wu, Tianwei Tu, Kai Ishtiaq, Abdullah Al Tanvir, Ridwanul Hasan Dong, Yilu Chowdhury, Omar Hussain, Syed Rafiul |
| author_facet | Rashid, Syed Md Mukit Wu, Tianwei Tu, Kai Ishtiaq, Abdullah Al Tanvir, Ridwanul Hasan Dong, Yilu Chowdhury, Omar Hussain, Syed Rafiul |
| contents | This paper proposes Proteus, a protocol state machine, property-guided, and budget-aware automated testing approach for discovering logical vulnerabilities in wireless protocol implementations. Proteus maintains its budget awareness by generating test cases (i.e., each being a sequence of protocol messages) that are not only meaningful (i.e., the test case mostly follows the desirable protocol flow except for some controlled deviations) but also have a high probability of violating the desirable properties. To demonstrate its effectiveness, we evaluated Proteus in two different protocol implementations, namely 4G LTE and BLE, across 23 consumer devices (11 for 4G LTE and 12 for BLE). Proteus discovered 25 unique issues, including 112 instances. Affected vendors have positively acknowledged 14 vulnerabilities through 5 CVEs. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2409_02905 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | State Machine Mutation-based Testing Framework for Wireless Communication Protocols Rashid, Syed Md Mukit Wu, Tianwei Tu, Kai Ishtiaq, Abdullah Al Tanvir, Ridwanul Hasan Dong, Yilu Chowdhury, Omar Hussain, Syed Rafiul Cryptography and Security This paper proposes Proteus, a protocol state machine, property-guided, and budget-aware automated testing approach for discovering logical vulnerabilities in wireless protocol implementations. Proteus maintains its budget awareness by generating test cases (i.e., each being a sequence of protocol messages) that are not only meaningful (i.e., the test case mostly follows the desirable protocol flow except for some controlled deviations) but also have a high probability of violating the desirable properties. To demonstrate its effectiveness, we evaluated Proteus in two different protocol implementations, namely 4G LTE and BLE, across 23 consumer devices (11 for 4G LTE and 12 for BLE). Proteus discovered 25 unique issues, including 112 instances. Affected vendors have positively acknowledged 14 vulnerabilities through 5 CVEs. |
| title | State Machine Mutation-based Testing Framework for Wireless Communication Protocols |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2409.02905 |