一句话:提出EDHOC-Fuzzer,用模型学习为EDHOC协议实现构建状态机模型,以进行基于模型的测试与漏洞发现。
EDHOC是IETF提出的面向受限IoT通信的轻量级认证密钥交换协议,其消息紧凑,但实现容易引入状态机缺陷与安全漏洞。本文介绍EDHOC-Fuzzer,一个针对EDHOC客户端与服务器实现的协议状态模糊测试工具。该工具利用模型学习自动推断实现的状态机模型,刻画其输入/输出行为,随后将模型用于基于模型的测试、实现指纹识别,或分析非一致性、状态机缺陷与安全漏洞。文中概述了EDHOC-Fuzzer的架构与用法,并给出了工具生成的模型示例以及当前发现。
EDHOC is a compact and lightweight authenticated key exchange protocol proposed by the IETF, whose design focuses on small message sizes, in order to be suitable for constrained IoT communication technologies. In this tool paper, we overview EDHOC-Fuzzer, a protocol state fuzzer for implementations of EDHOC clients and servers. It employs model learning to generate a state machine model of an EDHOC implementation, capturing its input/output behavior. This model can then be used for model-based testing, for fingerprinting, or can be analyzed for non-conformances, state machine bugs and security vulnerabilities. We overview the architecture and use of EDHOC-Fuzzer, and present some examples of models produced by the tool and our current findings.