CinfoFuzz: Fuzzing Method Based on Web Service Correlation Information of Embedded Devices
Feng Xiao Qi, Weiyu Dong · 2022 IEEE 10th International Conference on Information, Communication and Networks (ICICN) · 2022
There are many vulnerable vulnerabilities in Web service of embedded devices. However, existing fuzzing methods cannot analyze such Web service efficiently or effectively. Aiming at the above problems, this paper proposes a fuzzing method based on Web service correlation information of embedded devices (Wsci-ed). Based on this method, this paper implements the fuzzing test prototype tool CinfoFuzz, which guides the fuzzing with Wsci-ed. Comparing the performance of CinfoFuzz with the fuzzing tools Boofuzz and Peach, the results show that CinfoFuzz has higher efficiency; in the vulnerability mining experiment of actual software, CinfoFuzz can trigger more vulnerabilities.