Coverage-guided differential testing of TLS implementations based on syntax mutation.

ABSTRACT: Transport layer security (TLS) protocol is the most widely used security protocol in modern network communications. However, protocol vulnerabilities caused by the design of the network protocol or its implementation by programmers emerge one after another. Meanwhile, various versions of TLS protocol implementations exhibit different behavioral characteristics. Researchers are attempting to find the differences in protocol implementations based on differential testing, which is conducive to discovering the vulnerabilities. This paper provides a solution to find the differences more efficiently by targeting the TLS protocol handshake process. The differences of different implementations during the fuzzing process, such as code coverage and response data, are taken to guide the mutation of t

SUBMITTER: Pan Y 

PROVIDER: S-EPMC8786154 | biostudies-literature | 2022

REPOSITORIES: biostudies-literature