research-article

Free access

NFDFuzz: A Stateful Structure-Aware Fuzzer for Named Data Networking

Authors:

George Torres,

Davide Pesavento,

Junxiao Shi,

Lotfi BenmohamedAuthors Info & Claims

ICN '20: Proceedings of the 7th ACM Conference on Information-Centric Networking

Pages 169 - 171

https://doi.org/10.1145/3405656.3420234

Published: 22 September 2020 Publication History

PDF eReader

Abstract

Fuzzing is a very popular automated testing technique that has yet to be applied in any significant way to NDN (Named Data Networking). NDN and its software forwarding daemon NFD present interesting challenges for fuzzing. To be effective, a fuzzer for NFD needs to be both stateful, due to the nature of the NDN data plane, and aware of the packet structure and the rules governing the NDN wire protocol. In this work we present the design of our NFD fuzzer and provide an overview of its most salient implementation details.

Supplementary Material

MP4 File (p168-torres-presentation.mp4)

Download
14.86 MB

References

[1]

Van Jacobson, Diana K Smetters, James D Thornton, Michael F Plass, Nicholas H Briggs, and Rebecca L Braynard. 2009. Networking named content. In Proceedings of the 5th international conference on Emerging networking experiments and technologies. 1--12.

Digital Library

Google Scholar

[2]

Jun Li, Bodong Zhao, and Chao Zhang. 2018. Fuzzing: a survey. Cybersecurity 1, 1 (2018), 6.

Crossref

Google Scholar

[3]

LLVM Project. [n.d.]. A library for coverage-guided fuzz testing. Retrieved August 31, 2020 from https://llvm.org/docs/LibFuzzer.html

Google Scholar

[4]

Named Data Networking Project. [n.d.]. NDNLPv2: NDN Link Protocol, version 2. Retrieved August 31, 2020 from https://redmine.named-data.net/projects/nfd/wiki/NDNLPv2

Google Scholar

[5]

Named Data Networking Project. 2018. NFD Developer's Guide. Technical Report. NDN-0021, Revision 10. https://named-data.net/publications/techreports/ndn-0021-10-nfd-developer-guide/

Google Scholar

[6]

Matt Ruhstaller and Oliver Chang. [n.d.]. A New Chapter for OSS-Fuzz. Retrieved August 31, 2020 from https://security.googleblog.com/2018/11/a-new-chapter-for-oss-fuzz.html

Google Scholar

[7]

Lixia Zhang, Alexander Afanasyev, Jeffrey Burke, Van Jacobson, KC Claffy, Patrick Crowley, Christos Papadopoulos, Lan Wang, and Beichuan Zhang. 2014. Named Data Networking. ACM SIGCOMM Computer Communication Review 44, 3 (2014), 66--73.

Digital Library

Google Scholar

Cited By

View all

Hou BHuang CYang TWu GWang HZhang Y(2024)Research on State-Based Bluetooth Multi-Protocol Fuzzing2024 IEEE Annual Congress on Artificial Intelligence of Things (AIoT)10.1109/AIoT63253.2024.00013(13-18)Online publication date: 24-Jul-2024
https://doi.org/10.1109/AIoT63253.2024.00013
Park HNkuba CWoo SLee H(2022)L2Fuzz: Discovering Bluetooth L2CAP Vulnerabilities Using Stateful Fuzz Testing2022 52nd Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)10.1109/DSN53405.2022.00043(343-354)Online publication date: Jun-2022
https://doi.org/10.1109/DSN53405.2022.00043

Index Terms

NFDFuzz: A Stateful Structure-Aware Fuzzer for Named Data Networking
1. Networks
  1. Network components
    1. Intermediate nodes
      1. Routers
  2. Network protocols
    1. Network layer protocols
    2. Protocol correctness
      1. Protocol testing and verification
2. Software and its engineering
  1. Software creation and management
    1. Software verification and validation
      1. Software defect analysis
        Software testing and debugging
  2. Software organization and properties
    1. Extra-functional properties
      1. Software reliability

Recommendations

A Static Approach to Prioritizing JUnit Test Cases

Test case prioritization is used in regression testing to schedule the execution order of test cases so as to expose faults earlier in testing. Over the past few years, many test case prioritization techniques have been proposed in the literature. Most ...
Grammar-based testing for little languages: an experience report with student compilers
SLE 2020: Proceedings of the 13th ACM SIGPLAN International Conference on Software Language Engineering

We report on our experience in using various grammar-based test suite generation methods to test 61 single-pass compilers that undergraduate students submitted for the practical project of a computer architecture course.

We show that (1) all test ...
Prioritizing Variable-Strength Covering Array
COMPSAC '13: Proceedings of the 2013 IEEE 37th Annual Computer Software and Applications Conference

Combinatorial interaction testing is a well-studied testing strategy, and has been widely applied in practice. Combinatorial interaction test suite, such as fixed-strength and variable-strength interaction test suite, is widely used for combinatorial ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

ICN '20: Proceedings of the 7th ACM Conference on Information-Centric Networking

September 2020

181 pages

ISBN:9781450380409

DOI:10.1145/3405656

This paper is authored by an employee(s) of the United States Government and is in the public domain. Non-exclusive copying or redistribution is allowed, provided that the article citation is given and the authors and agency are clearly identified as its source.

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 22 September 2020

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Badges

Best Poster

Author Tags

Qualifiers

Research-article
Research
Refereed limited

Conference

ICN '20

Sponsor:

SIGCOMM

ICN '20: 7th ACM Conference on Information-Centric Networking

September 29 - October 1, 2020

Virtual Event, Canada

Acceptance Rates

ICN '20 Paper Acceptance Rate 15 of 39 submissions, 38%;

Overall Acceptance Rate 133 of 482 submissions, 28%

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

1
Total Citations
View Citations
281
Total Downloads

Downloads (Last 12 months)30
Downloads (Last 6 weeks)2

Reflects downloads up to 12 Dec 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

Hou BHuang CYang TWu GWang HZhang Y(2024)Research on State-Based Bluetooth Multi-Protocol Fuzzing2024 IEEE Annual Congress on Artificial Intelligence of Things (AIoT)10.1109/AIoT63253.2024.00013(13-18)Online publication date: 24-Jul-2024
https://doi.org/10.1109/AIoT63253.2024.00013
Park HNkuba CWoo SLee H(2022)L2Fuzz: Discovering Bluetooth L2CAP Vulnerabilities Using Stateful Fuzz Testing2022 52nd Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)10.1109/DSN53405.2022.00043(343-354)Online publication date: Jun-2022
https://doi.org/10.1109/DSN53405.2022.00043

View Options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Cited By

Index Terms

Recommendations

A Static Approach to Prioritizing JUnit Test Cases

Grammar-based testing for little languages: an experience report with student compilers

Prioritizing Variable-Strength Covering Array