TY - GEN
T1 - Towards automated vulnerability scanning of network servers
AU - Schagen, Nathan
AU - Koning, Koen
AU - Bos, Herbert
AU - Giuffrida, Cristiano
PY - 2018
Y1 - 2018
N2 - We explore a new technique for safe patch fingerprinting to automate vulnerability scanning of network servers. Our technique helps automate the discovery of inputs that safely discriminate vulnerable from patched servers for the latest vulnerabilities. This enables rapid updates to vulnerability scanning tools as new software vulnerabilities are discovered, allowing administrators to scan and secure their networks more quickly. To ensure such scans are safe and ethical, we need to reject inputs with malicious side effects. We have implemented a framework, based on delta execution, which tests the discriminative property of such inputs, as well as their safety. We use a fuzzer to find promising candidate inputs to further automate the process. To illustrate the potential of this approach, we present a Heartbleed case study.
AB - We explore a new technique for safe patch fingerprinting to automate vulnerability scanning of network servers. Our technique helps automate the discovery of inputs that safely discriminate vulnerable from patched servers for the latest vulnerabilities. This enables rapid updates to vulnerability scanning tools as new software vulnerabilities are discovered, allowing administrators to scan and secure their networks more quickly. To ensure such scans are safe and ethical, we need to reject inputs with malicious side effects. We have implemented a framework, based on delta execution, which tests the discriminative property of such inputs, as well as their safety. We use a fuzzer to find promising candidate inputs to further automate the process. To illustrate the potential of this approach, we present a Heartbleed case study.
KW - Internet-wide scanning
KW - Network security
KW - Vulnerability fingerprinting
UR - http://www.scopus.com/inward/record.url?scp=85049414570&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85049414570&partnerID=8YFLogxK
U2 - 10.1145/3193111.3193116
DO - 10.1145/3193111.3193116
M3 - Conference contribution
AN - SCOPUS:85049414570
T3 - Proceedings of the ACM Series
SP - 1
EP - 6
BT - Proceedings of the 11th European Workshop on Systems Security, EuroSec 2018
PB - Association for Computing Machinery, Inc
T2 - 11th European Workshop on Systems Security, EuroSec 2018
Y2 - 23 April 2018 through 26 April 2018
ER -
