模糊測試對網路協定的分析及實作

模糊測試是一種檢驗安全性漏洞的技術，其核心概念為發送大量變異、隨機的資料給測試端，以此找出測試端是否有程式設計錯誤或是會引發錯誤的特定數值存在。本論文使用模糊測試的技術來檢測Bidirectional Forwarding Detection（BFD）、Common Industrial Protocol（CIP）和Digital Imaging and Communications in Medicine（DICOM）三個通訊協定是否存在安全性的漏洞。主要執行步驟如下。第一、透過閱讀標準文件來找出全部的封包種類以及運作流程。第二、撰寫模糊測試程式並依據封包種類來定義Policy的內容以及欄位變異規則。第三、模糊測試程式將變異後的封包傳送給伺服器後，會分析伺服器收到變異後封包的結果。實驗結果顯示CIP和DICOM的模擬伺服器會在收到某些變異封包後產生不正常的運作，因此可確定CIP和DICOM的模擬伺服器都有安全上的漏洞。

關鍵字

模糊測試； BFD ； CIP ； DICOM

並列摘要

The fuzzing test is a technology to exploit protocol security vulnerabilities. The core concept is to mutate the large number of random inputs to the target in order to find out whether the target has occurred critical program errors or specific values that triggered the error. This paper uses fuzzing test technology to detect whether the Bidirectional Forwarding Detection (BFD), Common industrial protocol (CIP) and Digital Imaging and Communications in Medicine (DICOM) has security vulnerabilities. The steps are as follows. First, the paper tried to study the standard document to find out the all packet formats. Second, we implement the fuzzing test program and define the policies and the field variation rules according to the packet formats. Third, the fuzzing test program sends the mutated packets to the Server and analyzes the server response. The experimental results show that the CIP and DICOM simulation server will produce abnormal operation while receiving some mutated packets. Therefore, it can be confirmed that the CIP and DICOM simulation server has security vulnerabilities.

並列關鍵字

Fuzzing ； BFD ； CIP ； DICOM

主題瀏覽