A Fuzzing Method for Embedded Software

Fuzz testing is an important means of vulnerability discovery, but now fuzz testing technology is most for application software on traditional computer platforms, which can be not used on embedded software. We propose a fuzzing method for embedded software, which can solve the two technical difficulties: abnormal monitoring and automation. Also, we independent research and develop embedded fuzzy testing tool called Efuzzer. Experiments prove that the tool has very good practicality and is effective for discover buffer overflow vulnerabilities which can cause a system crash. Now the tool is tried in several software testing institutions, a few vulnerabilities were discovered.