Fuzzing a MACsec Key Agreement Protocol Application
Along this thesis, a popular testing technique to find bugs and vulnerabilities called fuzzing is implemented in order to exploit an application developed by Technica Electronics Barcelona S.L. First, a study of how the application works is required in order to properly design the tests. This applic...
| Autor: | |
|---|---|
| Tipo de recurso: | tesis de maestría |
| Fecha de publicación: | 2022 |
| País: | España |
| Institución: | Universitat Politècnica de Catalunya (UPC) |
| Repositorio: | UPCommons. Portal del coneixement obert de la UPC |
| Idioma: | inglés |
| OAI Identifier: | oai:upcommons.upc.edu:2117/379942 |
| Acceso en línea: | https://hdl.handle.net/2117/379942 |
| Access Level: | acceso abierto |
| Palabra clave: | Computer security MACsec MKA Fuzzing libFuzzer Seguretat informàtica Àrees temàtiques de la UPC::Informàtica::Seguretat informàtica |
| Sumario: | Along this thesis, a popular testing technique to find bugs and vulnerabilities called fuzzing is implemented in order to exploit an application developed by Technica Electronics Barcelona S.L. First, a study of how the application works is required in order to properly design the tests. This application implements the MACsec (a layer 2 secure communication protocol) Key Agreement Protocol. Then, a testing environment is generated to test the software of Technica Electronics using fuzzing. Finally, results are analyzed to find any security vulnerabilities the application may present. Preliminary results showed that the code is already robust as no bugs were found. |
|---|