Using attack injection to discover new vulnerabilities

Nuno Neves, João Antunes, Miguel Correia, Paulo Veríssimo, Rui Neves

Research output: Chapter in Book/Report/Conference proceedingConference contribution

22 Scopus citations

Abstract

Due to our increasing reliance on computer systems, security incidents and their causes are important problems that need to be addressed. To contribute to this objective, the paper describes a new tool for the discovery of security vulnerabilities on network connected servers. The AJECT tool uses a specification of the server's communication protocol to automatically generate a large number of attacks accordingly to some predefined test classes. Then, while it performs these attacks through the network, it monitors the behavior of the server both from a client perspective and inside the target machine. The observation of an incorrect behavior indicates a successful attack and the potential existence of a vulnerability. To demonstrate the usefulness of this approach, a considerable number of experiments were carried out with several IMAP servers. The results show that AJECT can discover several kinds of vulnerabilities, including a previously unknown vulnerability. © 2006 IEEE.
Original languageEnglish (US)
Title of host publicationProceedings of the International Conference on Dependable Systems and Networks
Pages457-466
Number of pages10
DOIs
StatePublished - Dec 22 2006
Externally publishedYes

Fingerprint Dive into the research topics of 'Using attack injection to discover new vulnerabilities'. Together they form a unique fingerprint.

Cite this