Tactical bus fuzz tester
AssigneeRaytheon Company
InventorsBrandon Woolley, Ross MacKinnon, Eric Rammelsberg
Life of this patent
Estimating the term…
Abstract
A method, apparatus and computer-readable medium for testing a target device. A fuzzer and a monitor are connected to the target device via a tactical bus. The fuzzer records messages sent from a source device to the target device over the tactical bus, creates a first fuzzed message having a data structure of the recorded message, and sends the first fuzzed message to the target device over the tactical bus. A fuzzer monitor monitors the target device for an anomalous response to the first fuzzed message, and determines a vulnerability of the target device from the response to the first fuzzed message.
Claims20
A method of testing a target device, comprising:
- sending data from a source device to the target device over a bus using a first protocol, wherein a first converter for converting between the first protocol and a second protocol is coupled to the bus between the source device and the target device;
- receiving a copy of the data at a fuzzer via the first converter, the copy of the data being received at the fuzzer via the converter using the second protocol;
- creating a first fuzzed message having a data structure of the received copy of the data;
- sending the first fuzzed message from the fuzzer to the target device via the first converter, wherein the first fuzzed message is sent using the second protocol and received using the first protocol, the first converter converting the first fuzzed message form the second protocol to the first protocol;
- monitoring, at a monitor, the target device for a response to the first fuzzed message;
- providing a signal from the monitor to the fuzzer using the second protocol when the first fuzzed message produces an anomalous response;
- and
- determining a vulnerability of the target device from the response of the target device to the first fuzzed message.
An apparatus for testing a target device, comprising:
- a first converter configured to couple to a tactical bus between a source device and the target device, the first converter configured to convert between a first protocol and the second protocol, the source device communicating with the target device via the first protocol;
- a fuzzer connectable to the target device via the converter, the fuzzer configured to:
- record, via the converter, a copy of messages sent from the source device to the target device over the tactical bus, the copy of the messages being received at the fuzzer using the second protocol,
- create a first fuzzed message having a data structure of the recorded message, and
- send the first fuzzed message to the target device over the tactical bus via the converter, wherein the first converter converts the first fuzzed message from the second protocol to the first protocol;
- a fuzzer monitor configured to:
- monitor the target device for a response to the first fuzzed message, and
- provide a signal to the fuzzer using the second protocol to identify when the first fuzzed message produces an anomalous response;
- determine a vulnerability of the target device from the response to the first fuzzed message.
A non-transitory computer-readable medium having instructions stored thereon that when read by a processor, cause the processor to perform a method of testing a target device, the method comprising:
- recording, for data sent from a source device to the target device via a bus using a first protocol, a copy of the data at a fuzzer via a first converter coupled to the bus between the source device and the target device, wherein the copy of the data is received at the fuzzer using a second protocol, the first converter converting between the first protocol and the second protocol;
- creating a first fuzzed message having a data structure of the recorded data;
- sending the first fuzzed message from the fuzzer to the target device via the first converter, wherein the first fuzzed message is sent using the second protocol and received using the first protocol, the first converter converting the first fuzzed message from the second protocol to the first protocol;
- monitoring the target device for an anomalous response to the first fuzzed message;
- providing a signal from the monitor to the fuzzer using the second protocol when the first fuzzed message produces an anomalous response;
- and
- determining a vulnerability of the target device from the response of the target device to the first fuzzed message.
Dependencies are inferred from the claim text.