Aggregator

简要总结方法：提出了一种自动化黑盒技术，检测有状态网络协议实现中的状态机错误自动化要求：需要提供协议的实现模型（可能不准确）和以 DFA 形式提供的协议状态机错误目录贡献：提出了一种新的完全黑盒技术，用于检测有状态网络协议实现中的漏洞和错误，其起点是一个模型和一组编码为自动机的协议状态机错误。从此时起，该技术就完全自动化了。 ...

Inferring SSH state machines using protocol state fuzzing

QRZ's Blog

2 years ago

这是一篇硕士毕业论文。看题目，“通过协议状态 fuzzing 推断 SSH 状态机”。那么问题来了：怎么实现的状态协议 fuzzing；没找到细节怎样推断 SSH 状态机的； L* 算法怎样构造 SSH 状态机的。先看概要，作者认为如果 RFC 标准作者将参考状态机加入标准中，大家的实现就不会太模糊了。看看第一章，“对正确形成的消息的顺序进行模糊测试，通过将 ...

Automata-Based Automated Detection of State Machine Bugs in Protocol Implementations

QRZ's Blog

2 years ago

Inferring SSH state machines using protocol state fuzzing

QRZ's Blog

2 years ago

为 Quartz 添加 Remark42 评论系统

QRZ's Blog

2 years ago

2024-07-29 Update 最后还是放弃了自建，换成了 Giscus。 2024-07-17 Update 跟随源码1添加更换日夜模式的代码： // @plodibre: Listen for theme changes and sync r42 if it changes const buttonListener: string = ...

东北大学“谛听”团队在CNCC2023上成功举办分论坛“关键基础设施安全论坛——AI：工业互联网安全新驱动力”

谛听ditecting

2 years ago

2023年10月28日，东北大学“谛听”团队在CNCC2023上成功举办分论坛“关键基础设施安全论坛——AI：工业互联网安全新驱动力”！

Quickly Triaging HTTP Traffic From GreyNoise’s New Hosted Sensors

Grey Noise

2 years ago

The GreyNoise Labs team shares one way to dig into HTTP content in PCAPs generated by our Early Access Program sensors.

Hunting Vulnerable Kernel Drivers

VMWare Security Blog - Threat Analysis

2 years ago

In information security, even seemingly insignificant issues could pose a significant threat. One notable vector of attack is through device drivers used by legitimate software developers. There are numerous available drivers to support legacy hardware in every industry, some of which are from businesses that have long stopped supporting the device. To continue operations, organizations … Continued

The post Hunting Vulnerable Kernel Drivers appeared first on VMware Security Blog.

Takahiro Haruyama