MobiDeke Fuzzing the GSM Protocol Stack

More documents

Recommendations

Info

$\H1B%-12345X@PJL JOB “HackingPrinters”$

IntroductionFuzzing over-the-airThe MobiDeke FrameworkConclusionTestcases generation and mutationMonitoringReportFuture enhancementLogfiles: iOS CrashReporter• iOS CrashReporter records application bugs• Path: /var/wireless/Library/Logs/CrashReporterNote: On Infineon X-Gold (iPhone 1 to iPhone 3) it’s possible to save basebandcore dumps in ‘CrashReporter’ if the CORE option is enabled.MobiDeke: Fuzzing the GSM Protocol Stack 29/38
IntroductionFuzzing over-the-airThe MobiDeke FrameworkConclusionTestcases generation and mutationMonitoringReportFuture enhancementThe final reportIndicators• 0: The state changed, but everything is fine• 1: The baseband takes a little bit longer to respond• 2: Maybe something happened (takes to long to respond, applicative crash...)• 3: It is probably a crash (can’t talk with the baseband at all...)• ...You can define new indicators depending on your analysis.MobiDeke: Fuzzing the GSM Protocol Stack 30/38
Page 1: MobiDeke: Fuzzing the GSM Protocol
Page 8 and 9: IntroductionFuzzing over-the-airThe
Page 18 and 19: Let’s fuzz it!IntroductionFuzzing
Page 31: IntroductionFuzzing over-the-airThe
Page 37 and 38: SummaryIntroductionFuzzing over-the
Page 41: IntroductionFuzzing over-the-airThe

MobiDeke Fuzzing the GSM Protocol Stack

Create successful ePaper yourself

Delete template?

Save as template?