Distributed System for Fuzzing Network Protocols Implementations

Student: Stafeev Aleksei

Supervisor: Denis Gamaunov

Educational Programme: Applied Mathematics and Information Science (Bachelor)

Year of Graduation: 2019

Security testing of network protocols implementations is increasingly common and arises in systems which are exposed to the Internet. Manual code review could reveal security flaws, but it is impractical in large code bases. In contrast, fuzz-testing could trigger these in an automated fashion. However, previous studies on fuzzing network protocols did not explore a distributed approach that could help solve the problem of a large fuzzing space. This work introduces the distributed fuzz-testing framework for vulnerability discovery in network protocol implementations. It employs a novel technique to partition fuzzing space using the acyclic directed graph representation.

Student Theses at HSE must be completed in accordance with the University Rules and regulations specified by each educational programme.

Summaries of all theses must be published and made freely available on the HSE website.

The full text of a thesis can be published in open access on the HSE website only if the authoring student (copyright holder) agrees, or, if the thesis was written by a team of students, if all the co-authors (copyright holders) agree. After a thesis is published on the HSE website, it obtains the status of an online publication.

Student theses are objects of copyright and their use is subject to limitations in accordance with the Russian Federation’s law on intellectual property.

In the event that a thesis is quoted or otherwise used, reference to the author’s name and the source of quotation is required.

Search all student theses