Methods, systems, and computer readable media for simplistic visual representation of complex interdependent network protocol fields for network protocol fuzzing and graphical framework for reporting instantaneous system level progress

• US 9,917,924 B2
• Filed: 03/16/2015
• Issued: 03/13/2018
• Est. Priority Date: 03/16/2015
• Status: Active Grant

• Current Assignee: Keysight Technologies Singapore (Holdings) Pte. Limited. (Keysight Technologies, Inc.)
• Original Assignee: Keysight Technologies Singapore (Holdings) Pte. Limited. (Keysight Technologies, Inc.)
• Inventors: Mandal, Kingshuk
• Primary Examiner(s): Bashore, William
• Assistant Examiner(s): Parcher, Daniel
• Application Number:
  US14/658,860
• Publication Number:
  US 20160277541A1
• Time in Patent Office: 1,093 Days
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: H04L 41/0813 characterised by the conditions triggering a change of settings
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 43/50 Testing arrangements
• CPC Class Codes: H04L 69/02 Protocol performance
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A method for visualizing interdependent network protocol fields for fuzzing and progress reporting includes providing a graphical user interface including a stacked representation of network protocol fields to be fuzzed. The method further includes displaying, in the stacked representation, an indication of network protocol fields that can or cannot be fuzzed. The method further includes receiving, via the stacked representation, selections of network protocol fields to be fuzzed and specifications of fuzzed parameter values for the selections. The method further includes generating and sending to a device under test network protocol packets with fuzzed parameter values according the selections and specifications.

Claims

1. A method for network communications protocol fuzzing, the method comprising:

in a computing device including a processor and a memory;

providing, by the processor, a fuzzer graphical user interface (GUI) including a stacked representation of individual network protocol fields to be fuzzed;

displaying, by the processor and in the fuzzer GUI, indications of the individual network protocol fields that can be fuzzed;

in response to interaction with the fuzzer GUI, changing at least one of the indications of network protocol fields that can be fuzzed to an indication of a network protocol field that cannot be fuzzed;

receiving, via the stacked representation, selections of the individual network protocol fields to be fuzzed and specifications of fuzzed parameter values for the selections;

creating test packets with fuzzed parameter values corresponding to the selections of the individual network protocol fields to be fuzzed and the specifications; and

transmitting the test packets with the fuzzed parameter values to a network communications protocol stack under test.

2. The method of claim 1 wherein the stacked representation includes a two-dimensional representation of the individual network protocol fields and in which protocol layers are stacked on top of each other.

3. The method of claim 2 wherein the protocol layers correspond to implementations of open systems interconnect (OSI) protocol layers.

4. The method of claim 3 wherein the implementations of OSI protocol layers include an internet protocol (IP) protocol layer, a transmission control protocol (TCP) protocol layer, and a border gateway protocol (BGP) protocol layer.

5. The method of claim 3 wherein the protocol layers include an internet protocol (IP) protocol layer, a transmission control protocol (TCP) protocol layer, and an open shortest path first (OSPF) protocol layer.

6. The method of claim 3 wherein the stacked representation includes, for at least one of the protocol layers, a fuzzing progress indicator indicating progress of fuzzing of protocol information for the protocol layer.

7. The method of claim 1 wherein the stacked representation includes per-field fuzzing status indicators that indicate whether or not fuzzing has been enabled for a given individual network protocol field.

8. The method of claim 1 wherein the computing device comprises a network equipment test device.

9. The method of claim 1 wherein the individual network protocol fields in the stacked representation are selectable, and, when selected, invoke a pattern editor that allows specification of fuzzed parameter values for the individual network protocol fields.

10. The method of claim 9 wherein the pattern editor is configured to allow specification of a manner in which the fuzzed parameter values will vary.

11. A system for network communications protocol fuzzing, the system comprising:

a computing device including a processor and a memory;

a fuzzer graphical user interface (GUI), stored in the memory and executed by the processor, for displaying a stacked representation of individual network protocol fields to be fuzzed, the stacked representation including indications of the individual network protocol fields that can be fuzzed, in response to interaction with the fuzzer GUI, changing at least one of the indications of network protocol fields that can be fuzzed to an indication of a network protocol field that cannot be fuzzed, receiving, via the stacked representation, selections of the individual network protocol fields to be fuzzed and specifications of fuzzed parameter values for the selections; and

a fuzzer, stored in the memory and executed by the processor, for creating test packets with fuzzed parameter values corresponding to the selections of the individual network protocol fields to be fuzzed and the specifications and transmitting the test packets with the fuzzed parameter values to a network communications protocol stack under test.

12. The system of claim 11 wherein the stacked representation includes a two-dimensional representation of the individual network protocol fields and in which protocol layers are stacked on top of each other.

13. The system of claim 12 wherein the protocol layers correspond to implementations of open systems interconnect (OSI) protocol layers.

14. The system of claim 13 wherein the implementations of OSI protocol layers include an internet protocol (IP) protocol layer, a transmission control protocol (TCP) protocol layer, and a border gateway protocol (BGP) protocol layer.

15. The system of claim 13 wherein the implementations of OSI protocol layers include an internet protocol (IP) protocol layer, a transmission control protocol (TCP) protocol layer, and an open shortest path first (OSPF) protocol layer.

16. The system of claim 13 wherein the stacked representation includes, for at least one of the protocol layers, a fuzzing progress indicator indicating progress of fuzzing of protocol information for the protocol layer.

17. The system of claim 13 wherein the stacked representation includes per-field fuzzing status indicators that indicate whether or not fuzzing has been enabled for a given individual network protocol field.

18. The system of claim 11 wherein the computing device comprises a network equipment test device.

19. The system of claim 11 wherein the individual network protocol fields in the stacked representation are selectable, and, when selected, invoke a pattern editor that allows specification of fuzzed parameter values for the individual network protocol fields.

20. The system of claim 19 wherein the pattern editor is configured to allow specification of a manner in which the fuzzed parameters will vary.

21. A non-transitory computer readable medium having stored thereon executable instructions that when executed by the processor of a computer control the computer to perform steps comprising:

in a computing device including a processor and a memory;

providing, by the processor, a fuzzer graphical user interface (GUI) including a stacked representation of individual network protocol fields to be fuzzed;

displaying, by the processor and in the fuzzer GUI, indications of the individual network protocol fields that can be fuzzed;

in response to interaction with the fuzzer GUI, changing at least one of the indications of network protocol fields that can be fuzzed to an indication of a network protocol field that cannot be fuzzed;

receiving, via the stacked representation, selections of the individual network protocol fields to be fuzzed and specifications of fuzzed parameter values for the selections;

creating test packets with fuzzed parameter values corresponding to the selections of the individual network protocol fields to be fuzzed and the specifications; and

transmitting the test packets with the fuzzed parameter values to a network communications protocol stack under test.