Busca avançada
Ano de início
Entree


Program-Aware Fuzzing for MQTT Applications

Texto completo
Autor(es):
Araujo Rodriguez, Luis Gustavo ; Batista, Daniel Macedo
Número total de Autores: 2
Tipo de documento: Artigo Científico
Fonte: PROCEEDINGS OF THE 29TH ACM SIGSOFT INTERNATIONAL SYMPOSIUM ON SOFTWARE TESTING AND ANALYSIS, ISSTA 2020; v. N/A, p. 5-pg., 2020-01-01.
Resumo

Over the last few years, MQTT applications have been widely exposed to vulnerabilities because of their weak protocol implementations. For our preliminary research, we conducted background studies to: (1) determine the main cause of vulnerabilities in MQTT applications; and (2) analyze existing MQTT-based testing frameworks. Our preliminary results confirm that MQTT is most susceptible to malformed packets, and its existing testing frameworks are based on blackbox fuzzing, meaning vulnerabilities are difficult and time-consuming to find. Thus, the aim of my research is to study and develop effective fuzzing strategies for the MQTT protocol, thereby contributing to the development of more robust MQTT applications in IoT and Smart Cities. (AU)

Processo FAPESP: 18/22979-2 - IoT-SED: segurança e eficiência no transporte de dados na Internet das Coisas
Beneficiário:Daniel Macêdo Batista
Modalidade de apoio: Auxílio à Pesquisa - Regular
Processo FAPESP: 15/24485-9 - Internet do futuro aplicada a cidades inteligentes
Beneficiário:Fabio Kon
Modalidade de apoio: Auxílio à Pesquisa - Temático
Processo FAPESP: 14/50937-1 - INCT 2014: da Internet do Futuro
Beneficiário:Fabio Kon
Modalidade de apoio: Auxílio à Pesquisa - Temático