MobiDeke Fuzzing the GSM Protocol Stack

More documents

Recommendations

Info

$\H1B%-12345X@PJL JOB “HackingPrinters”$

IntroductionFuzzing over-the-airThe MobiDeke FrameworkConclusionFuzzing4 very important points• Choose your target• Inject malformed data• Smart generation of GSM packets (specs, existing librairies...)• Mutate each field of the generated message (describe a structure with Sulley)• Monitor target activity• Classify bugs, behavioursMobiDeke: Fuzzing the GSM Protocol Stack 9/38
IntroductionFuzzing over-the-airThe MobiDeke FrameworkConclusionFuzzing4 very important points• Choose your target• Inject malformed data• Monitor target activity• Quite difficult because we don’t have a debugger• Check if the phone is responding• Look for strange behaviors / side-effects• ...• Classify bugs, behavioursMobiDeke: Fuzzing the GSM Protocol Stack 9/38
Page 1: MobiDeke: Fuzzing the GSM Protocol
Page 8 and 9: IntroductionFuzzing over-the-airThe
Page 18 and 19: Let’s fuzz it!IntroductionFuzzing
Page 37 and 38: SummaryIntroductionFuzzing over-the
Page 41: IntroductionFuzzing over-the-airThe

MobiDeke Fuzzing the GSM Protocol Stack

Create successful ePaper yourself

Delete template?

Save as template?