Fuzz Testing

This section includes topics that cover how to perform fuzz testing on various devices and protocols with beSTORM.

Overview

beSTORM's fuzzing sequences are deterministic and can be replayed by telling beSTORM to start from the beginning, or from any other attack vector (position) you provide to beSTORM.

You can monitor beSTORM's progress by viewing the Progress Information section by selecting Preview. This displays the dataset currently being sent by beSTORM to the tested product, or you can look up the Detailed Log to view the current speed beSTORM is testing the product.

Even though beSTORM has predefined buffers which it fuzzes, you have complete control over the types of data it fuzzes and the type of data it generates (for example, long buffers, overflowing integers, etc.). Changing these predefined buffers, or even adding additional buffers, can greatly enhance the performance and the usability of beSTORM as it allows it to find more exceptions quickly, as well as find exceptions that might be specifically relevant to your product.

The following fuzz testing topics are available:

• Fuzz Testing with the ARP Protocol

• Fuzz Testing with Bluetooth Low Energy (BLE) Protocols

• Fuzz Testing with the Bluetooth A2DP and HFD Protocols

• Fuzz Testing with the beSTORM Bluetooth Monitor

• Fuzz Testing a CAN bus Connection with a PCAN-USB FD Adapter

• Fuzz Testing a CAN bus OBDII Connection with AnaGate CAN X2/FX2 Hardware

• Fuzz Testing with EDSA Modules

• Fuzz Testing Files

• Fuzz Testing Hardware Firewalls

• Fuzz Testing Imported Files

• Fuzz Testing with the IPsec AH Protocol

• Fuzz Testing with the IS-IS Protocol

• Fuzz Testing with the MPLS LDP Protocol

• Fuzz Testing with the OSPFv2 Protocol

• Fuzz Testing with the OSPFv3 Protocol

• Fuzz Testing with the PTPv2 Client Protocol

• Fuzz Testing with the PTPv2 Server Protocol

• Fuzz Testing a Secure Shell (SSH) Server

• Fuzz Testing a Secure Sockets Layer (SSL) Server

• Fuzz Testing Serial Port Protocols

• Fuzz Testing USB Devices

• Fuzz Testing Web APIs

• Fuzz Testing Wi-Fi Devices

• Fuzz Testing Zigbee Hardware