sign in
english version rss feed

inria-00166947, version 1

KiF: A stateful SIP Fuzzer

Humberto Abdelnur () 1, Olivier Festor () 1, Radu State 1

1st International Conference on Principles, Systems and Applications of IP Telecommunications (IPTComm) (2007)

Abstract: With the recent evolution in the VoIP market, where more and more devices and services are being pushed on a very promising market, assuring their security becomes crucial. Among the most dangerous threats to VoIP, failures and bugs in the software implementation will still rank high on the list of vulnerabilities. In this paper we address the issue of detecting such vulnerabilities using a stateful fuzzer. We describe an automated attack approach capable to self-improve and to track the state context of a target device. We implemented our approach and were able to discover vulnerabilities in market leading and well known equipments and software.

  • 1:  MADYNES (INRIA Lorraine - LORIA)
  • INRIA – CNRS : UMR7503 – Université Henri Poincaré - Nancy I – Université Nancy II – Institut National Polytechnique de Lorraine (INPL)
  • Domain : Computer Science/Networking and Internet Architecture
  • Keywords : Software Testing Techniques – Protocol Fuzzer – VoIP Security – SIP Vulnerabilities
 
  • inria-00166947, version 1
  • oai:hal.inria.fr:inria-00166947
  • From: 
  • Submitted on: Tuesday, 14 August 2007 09:37:30
  • Updated on: Tuesday, 14 August 2007 11:39:39
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...
all articles on CCSd database...