IKEv2 Protocol Fuzzing Test on Simulated ASA

With the development of the Internet of Things, more and more private information is exposed online. Protecting the security of the users' information has become more and more important. Routers and firewalls are the important components of the core network whose security cannot be ignored. And we focus our research on Cisco ASA because Cisco network equipment is the most widely deployed in the global Internet and has an absolute advantage in technology and market share. This paper describes how to perform security testing on Cisco ASA without hardware devices. What's more, we have built a vulnerability analysis environment for the simulated ASA and proposed a fuzzing test method for IKEv2 based on Scapy. And we have found some bugs in ASA IKEv2 with it.