Matches in SemOpenAlex for { <https://semopenalex.org/work/W3048340936> ?p ?o ?g. }
Showing items 1 to 82 of
82
with 100 items per page.
- W3048340936 endingPage "834" @default.
- W3048340936 startingPage "817" @default.
- W3048340936 abstract "The recent rise in complex Wi-Fi vulnerabilities, such as KRACK and Dragonslayer, indicates the critical need for effective Wi-Fi protocol testing tools. In this article, we conceptualize, design and implement a directed fuzzing methodology named <sc xmlns:mml=http://www.w3.org/1998/Math/MathML xmlns:xlink=http://www.w3.org/1999/xlink>Greyhound</small> that automatically tests the Wi-Fi client implementations against vulnerabilities such as crashes or non-compliant behaviors. Leveraging a holistic Wi-Fi protocol model, <sc xmlns:mml=http://www.w3.org/1998/Math/MathML xmlns:xlink=http://www.w3.org/1999/xlink>Greyhound</small> directs the fuzzer in specific states of target Wi-Fi client. By exchanging mutated packets with a Wi-Fi client, <sc xmlns:mml=http://www.w3.org/1998/Math/MathML xmlns:xlink=http://www.w3.org/1999/xlink>Greyhound</small> aims to induce the client to exhibit anomalous behaviors that badly deviate from Wi-Fi protocols. We have implemented <sc xmlns:mml=http://www.w3.org/1998/Math/MathML xmlns:xlink=http://www.w3.org/1999/xlink>Greyhound</small> and evaluated it on a variety of real-world Wi-Fi clients, including smartphone, Raspberry Pi, IoT device microcontrollers and a medical device. Our evaluation indicates that <sc xmlns:mml=http://www.w3.org/1998/Math/MathML xmlns:xlink=http://www.w3.org/1999/xlink>Greyhound</small> not only automatically discovers known vulnerabilities (including KRACK and Dragonslayer) that would require specialized verification otherwise, but, more importantly, it also has uncovered four new vulnerabilities in popular Wi-Fi client devices. All discovered vulnerabilities have been confirmed by manufacturers and they have been assigned three different common vulnerability exposure (CVE) IDs. We also win a bug bounty of 2,200 USD for discovering the security vulnerabilities. Furthermore, our evaluation with three existing Wi-Fi fuzz testing tools reveals that all such tools fail to discover any of the vulnerabilities (including crashes) uncovered by <sc xmlns:mml=http://www.w3.org/1998/Math/MathML xmlns:xlink=http://www.w3.org/1999/xlink>Greyhound</small> . Last but not the least, we have deployed <sc xmlns:mml=http://www.w3.org/1998/Math/MathML xmlns:xlink=http://www.w3.org/1999/xlink>Greyhound</small> to test the Wi-Fi client implementation on automotive head units. <sc xmlns:mml=http://www.w3.org/1998/Math/MathML xmlns:xlink=http://www.w3.org/1999/xlink>Greyhound</small> automatically discovers KRACK, Dragonslayer and other anomalies in these Wi-Fi implementations. Such a real world try-out justifies the necessity and efficacy of <sc xmlns:mml=http://www.w3.org/1998/Math/MathML xmlns:xlink=http://www.w3.org/1999/xlink>Greyhound</small> ." @default.
- W3048340936 created "2020-08-13" @default.
- W3048340936 creator A5031825962 @default.
- W3048340936 creator A5075004359 @default.
- W3048340936 creator A5088928000 @default.
- W3048340936 date "2022-03-01" @default.
- W3048340936 modified "2023-10-08" @default.
- W3048340936 title "Greyhound: Directed Greybox Wi-Fi Fuzzing" @default.
- W3048340936 cites W146244851 @default.
- W3048340936 cites W2014936340 @default.
- W3048340936 cites W2027515139 @default.
- W3048340936 cites W2032798087 @default.
- W3048340936 cites W2129975948 @default.
- W3048340936 cites W2145994227 @default.
- W3048340936 cites W2400427673 @default.
- W3048340936 cites W2497816424 @default.
- W3048340936 cites W2517087431 @default.
- W3048340936 cites W2535617737 @default.
- W3048340936 cites W2595115180 @default.
- W3048340936 cites W2603244601 @default.
- W3048340936 cites W2613534458 @default.
- W3048340936 cites W2615918556 @default.
- W3048340936 cites W2741068848 @default.
- W3048340936 cites W2766540688 @default.
- W3048340936 cites W2767098552 @default.
- W3048340936 cites W2791018263 @default.
- W3048340936 cites W2794853458 @default.
- W3048340936 cites W2806377938 @default.
- W3048340936 cites W2963350015 @default.
- W3048340936 doi "https://doi.org/10.1109/tdsc.2020.3014624" @default.
- W3048340936 hasPublicationYear "2022" @default.
- W3048340936 type Work @default.
- W3048340936 sameAs 3048340936 @default.
- W3048340936 citedByCount "0" @default.
- W3048340936 crossrefType "journal-article" @default.
- W3048340936 hasAuthorship W3048340936A5031825962 @default.
- W3048340936 hasAuthorship W3048340936A5075004359 @default.
- W3048340936 hasAuthorship W3048340936A5088928000 @default.
- W3048340936 hasConcept C111065885 @default.
- W3048340936 hasConcept C136764020 @default.
- W3048340936 hasConcept C142724271 @default.
- W3048340936 hasConcept C199360897 @default.
- W3048340936 hasConcept C204787440 @default.
- W3048340936 hasConcept C2777904410 @default.
- W3048340936 hasConcept C2780385302 @default.
- W3048340936 hasConcept C2985745059 @default.
- W3048340936 hasConcept C41008148 @default.
- W3048340936 hasConcept C71924100 @default.
- W3048340936 hasConcept C81860439 @default.
- W3048340936 hasConceptScore W3048340936C111065885 @default.
- W3048340936 hasConceptScore W3048340936C136764020 @default.
- W3048340936 hasConceptScore W3048340936C142724271 @default.
- W3048340936 hasConceptScore W3048340936C199360897 @default.
- W3048340936 hasConceptScore W3048340936C204787440 @default.
- W3048340936 hasConceptScore W3048340936C2777904410 @default.
- W3048340936 hasConceptScore W3048340936C2780385302 @default.
- W3048340936 hasConceptScore W3048340936C2985745059 @default.
- W3048340936 hasConceptScore W3048340936C41008148 @default.
- W3048340936 hasConceptScore W3048340936C71924100 @default.
- W3048340936 hasConceptScore W3048340936C81860439 @default.
- W3048340936 hasFunder F4320316520 @default.
- W3048340936 hasIssue "2" @default.
- W3048340936 hasLocation W30483409361 @default.
- W3048340936 hasOpenAccess W3048340936 @default.
- W3048340936 hasPrimaryLocation W30483409361 @default.
- W3048340936 hasRelatedWork W2511770387 @default.
- W3048340936 hasRelatedWork W2748952813 @default.
- W3048340936 hasRelatedWork W2766647240 @default.
- W3048340936 hasRelatedWork W2899084033 @default.
- W3048340936 hasRelatedWork W2990186179 @default.
- W3048340936 hasRelatedWork W3023977444 @default.
- W3048340936 hasRelatedWork W3120811337 @default.
- W3048340936 hasRelatedWork W3203597304 @default.
- W3048340936 hasRelatedWork W4210660460 @default.
- W3048340936 hasRelatedWork W4385301282 @default.
- W3048340936 hasVolume "19" @default.
- W3048340936 isParatext "false" @default.
- W3048340936 isRetracted "false" @default.
- W3048340936 magId "3048340936" @default.
- W3048340936 workType "article" @default.