Conference Proceedings

AFLNET: A Greybox Fuzzer for Network Protocols

VT Pham, M Bohme, A Roychoudhury

2020 IEEE 13th International Conference on Software Testing, Validation and Verification (ICST) | IEEE | Published : 2020


Server fuzzing is difficult. Unlike simple command-line tools, servers feature a massive state space that can be traversed effectively only with well-defined sequences of input messages. Valid sequences are specified in a protocol. In this paper, we present AFLNET, the first greybox fuzzer for protocol implementations. Unlike existing protocol fuzzers, AFLNET takes a mutational approach and uses state-feedback to guide the fuzzing process. AFLNET is seeded with a corpus of recorded message exchanges between the server and an actual client. No protocol specification or message grammars are required. AFLNET acts as a client and replays variations of the original sequence of messages sent to th..

View full abstract


Awarded by Australian Research Council

Citation metrics