@inproceedings{f0fc974bf8fe4dff8a46db1d2196b34f,
title = "SMuF: State machine based mutational fuzzing framework for internet of things",
abstract = "The Internet of Things (IoT) exposes vulnerabilities at various levels. In this paper, we propose a mutation-based fuzzing framework called SMuF in order to find various vulnerabilities in IoT devices. We harness the power of state machine to generate distinct states of a protocol. In addition, we also generate legitimate packets as levels and sub-levels to intelligently mutate the data fields in the packet. Our mutation technique lies in mutation based on location, context and time. We propose a probability score for selecting the inputs for fuzzing based on payload length. We implemented and evaluated the proposed framework in our IoT security testbed. Using SMuF, we have discovered various vulnerabilities such as Denial of Service (DoS), Buffer Overflow, Session Hijacking etc.",
keywords = "IoT security, Mutational fuzzing, Vulnerability discovery",
author = "Neeraj Karamchandani and Vinay Sachidananda and Suhas Setikere and Jianying Zhou and Yuval Elovici",
note = "Publisher Copyright: {\textcopyright} 2019, Springer Nature Switzerland AG.; 13th International Conference on Critical Information Infrastructures Security, CRITIS 2018 ; Conference date: 24-09-2018 Through 26-09-2018",
year = "2019",
month = jan,
day = "1",
doi = "10.1007/978-3-030-05849-4_8",
language = "American English",
isbn = "9783030058487",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "101--112",
editor = "Eric Luiijf and Inga {\v Z}utautaitė and H{\"a}mmerli, {Bernhard M.}",
booktitle = "Critical Information Infrastructures Security - 13th International Conference, CRITIS 2018, Revised Selected Papers",
address = "Germany",
}