A Fuzzing Method for Embedded Software
Xiaolei Deng, Yubing Duan, Kai Deng · 2021 IEEE 5th Information Technology,Networking,Electronic and Automation Control Conference (ITNEC) · 2021
Fuzz testing is an important means of vulnerability discovery, but now fuzz testing technology is most for application software on traditional computer platforms, which can be not used on embedded software. We propose a fuzzing method for embedded software, which can solve the two technical difficulties: abnormal monitoring and automation. Also, we independent research and develop embedded fuzzy testing tool called Efuzzer. Experiments prove that the tool has very good practicality and is effective for discover buffer overflow vulnerabilities which can cause a system crash. Now the tool is tried in several software testing institutions, a few vulnerabilities were discovered.