HAL - INRIA :: [inria-00166947, version 1] KiF: A stateful SIP Fuzzer

inria-00166947, version 1

<?xml version="1.0" encoding="UTF-8"?>
<listBibl xmlns="http://www.tei-c.org/ns/1.0" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:mml="http://www.w3.org/1998/Math/MathML">
<listBibl type="inproceedings"><head>Peer-reviewed conferences/proceedings</head>
<biblStruct type="inproceedings" xml:id="inria-00166947"><analytic>
<author><persName><forename>Humberto</forename><surname>Abdelnur</surname></persName>
<affiliation>
<orgName type="laboratory">INRIA Lorraine - LORIA</orgName>
<orgName type="team">MADYNES</orgName>
<country>FR</country>
<orgName type="institution">INRIA</orgName>
<orgName type="institution">CNRS : UMR7503</orgName>
<orgName type="institution">Université Henri Poincaré - Nancy I</orgName>
<orgName type="institution">Université Nancy II</orgName>
<orgName type="institution">Institut National Polytechnique de Lorraine</orgName>
</affiliation>
</author>
<author><persName><forename>Olivier</forename><surname>Festor</surname></persName>
<affiliation>
<orgName type="laboratory">INRIA Lorraine - LORIA</orgName>
<orgName type="team">MADYNES</orgName>
<country>FR</country>
<orgName type="institution">INRIA</orgName>
<orgName type="institution">CNRS : UMR7503</orgName>
<orgName type="institution">Université Henri Poincaré - Nancy I</orgName>
<orgName type="institution">Université Nancy II</orgName>
<orgName type="institution">Institut National Polytechnique de Lorraine</orgName>
</affiliation>
</author>
<author><persName><forename>Radu</forename><surname>State</surname></persName>
<affiliation>
<orgName type="laboratory">INRIA Lorraine - LORIA</orgName>
<orgName type="team">MADYNES</orgName>
<country>FR</country>
<orgName type="institution">INRIA</orgName>
<orgName type="institution">CNRS : UMR7503</orgName>
<orgName type="institution">Université Henri Poincaré - Nancy I</orgName>
<orgName type="institution">Université Nancy II</orgName>
<orgName type="institution">Institut National Polytechnique de Lorraine</orgName>
</affiliation>
</author>
<title type="main" level="a">KiF: A stateful SIP Fuzzer</title></analytic><monogr><meeting>1st International Conference on Principles, Systems and Applications of IP Telecommunications (IPTComm)</meeting><imprint><publisher>ACM SIGCOMM</publisher><pubPlace><settlement>New York</settlement><country>United States</country></pubPlace></imprint></monogr><idno type="HALid">http://hal.inria.fr/inria-00166947/en/</idno><idno type="HALFile">http://hal.inria.fr/inria-00166947/PDF/Kif_A_stateful_SIP_Fuzzer.pdf</idno></biblStruct>
</listBibl>
</listBibl>

KiF: A stateful SIP Fuzzer

Humberto Abdelnur (

) ¹, Olivier Festor (

) ¹, Radu State ¹

(2007-07-19)

Access to full text
PDF

1st International Conference on Principles, Systems and Applications of IP Telecommunications (IPTComm) (2007)

Abstract: With the recent evolution in the VoIP market, where more and more devices and services are being pushed on a very promising market, assuring their security becomes crucial. Among the most dangerous threats to VoIP, failures and bugs in the software implementation will still rank high on the list of vulnerabilities. In this paper we address the issue of detecting such vulnerabilities using a stateful fuzzer. We describe an automated attack approach capable to self-improve and to track the state context of a target device. We implemented our approach and were able to discover vulnerabilities in market leading and well known equipments and software.

1:	MADYNES (INRIA Lorraine - LORIA)
	INRIA – CNRS : UMR7503 – Université Henri Poincaré - Nancy I – Université Nancy II – Institut National Polytechnique de Lorraine

Domain

Computer Science/Networking and Telecommunication

Keywords : Software Testing Techniques – Protocol Fuzzer – VoIP Security – SIP Vulnerabilities


inria-00166947, version 1
http://hal.inria.fr/inria-00166947/en/
oai:hal.inria.fr:inria-00166947
From: Humberto Abdelnur <>
Submitted on: Tuesday, 14 August 2007 09:37:30
Updated on: Tuesday, 14 August 2007 11:39:39