NDLI: A model-based fuzzing approach for DBMS

Content Provider	IEEE Xplore Digital Library
Author	Jiajie Wang Puhan Zhang Lei Zhang Haowen Zhu Ye Xiaojun
Copyright Year	2013
Description	Author affiliation: China Inf. Technol. Security Evaluation Center, Beijing, China (Jiajie Wang; Puhan Zhang; Lei Zhang) \|\| Sch. of Software, Tsinghua Univ., Beijing, China (Haowen Zhu; Ye Xiaojun)
Abstract	As one of critical components of information infra-structure, database management system (DBMS) faces various security challenges. Although fuzz testing has been used in the security evaluation of DBMS, most of current fuzzers focus on SQL syntax more than multi-phase interaction between the client and server of DBMS. This paper presents a model-based fuzzing approach to discover vulnerabilities of DBMSs, which supports state-aware and multi-phase fuzz testing. Based on the model-based fuzzing framework, a finite state machine model EXT-DBFSM is proposed to manipulate the fuzzing process and guarantee the validation of test cases. The approach is implemented and experimented on several DBMSs. The result has proved effectiveness of this approach, 14 vulnerabilities are discovered, including 10 unreleased ones.
Starting Page	426
Ending Page	431
File Size	776996
Page Count	6
File Format	PDF
ISBN	9781479914067
DOI	10.1109/ChinaCom.2013.6694634
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2013-08-14
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	security testing for DBMS Protocols vulnerability discovery Automata Syntactics model-based testing Security Servers Monitoring Testing fuzzing framework
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A Model-Based Behavioral Fuzzing Approach for Network Service

Vulnerability mining for network protocols based on fuzzing

A research on vulnerability discovering for router protocols based on fuzzing

A vulnerability detecting method for Modbus-TCP based on smart fuzzing mechanism

A model guided security vulnerability discovery approach for network protocol implementation

RFSM-Fuzzing a Smart Fuzzing Algorithm Based on Regression FSM

A Distributed Monitoring Approach for Trust Assessment Based on Formal Testing

Vulnerability mining of Cisco router based on fuzzing

Brute Force Vulnerability Testing Technology Based on Data Mutation

A model-based fuzzing approach for DBMS

Similar Documents

A Model-Based Behavioral Fuzzing Approach for Network Service

Vulnerability mining for network protocols based on fuzzing

A research on vulnerability discovering for router protocols based on fuzzing

A vulnerability detecting method for Modbus-TCP based on smart fuzzing mechanism

A model guided security vulnerability discovery approach for network protocol implementation

RFSM-Fuzzing a Smart Fuzzing Algorithm Based on Regression FSM

A Distributed Monitoring Approach for Trust Assessment Based on Formal Testing

Vulnerability mining of Cisco router based on fuzzing

Brute Force Vulnerability Testing Technology Based on Data Mutation

A model-based fuzzing approach for DBMS