Vulnerability mining for network protocols based on fuzzing

With the development of the network, internet security is becoming a hot research topic. The vulnerabilities existed in protocol implementations may be exploited by malicious attackers and cause serious problems. So it is necessary to do research in the vulnerability mining of network protocol. This paper presents an efficient approach for detecting the flaws of network protocols based on fuzzing. A fuzzer is built by extending an intelligent tool-Sulley, aiming to test the FTP and modify its weaknesses which are unable to solve the loop structure. Then, we apply the way to three FTP servers. The results show that the approach can easily find vulnerabilities of protocol implementation.