2021 · Conference accepted
Snipuzz: Black-box Fuzzing of IoT Firmware via Message Snippet Inference
Snipuzz fuzzes IoT firmware as a client, using device responses to infer message snippets that guide mutations. It was evaluated on 20 real-world IoT devices and compared with four IoT fuzzing approaches.
Scope and limitations
The evaluation covers 20 popular real-world IoT devices and comparisons with IoTFuzzer, BooFuzz, Doona, and Nemesys. It reports five newly discovered zero-day vulnerabilities, three exposed only by Snipuzz.
Why it fits this collection
It infers message structure from device responses to guide black-box testing of IoT firmware.
Publication and review details
- Venue
- ACM CCS 2021
- Status
- Conference accepted
- Publication / posting date
- May 12, 2021
- Date source
- First arXiv submission date; the arXiv comment names the venue.
- First arXiv submission
- May 12, 2021
- arXiv
- 2105.05445
- Reviewed arXiv version
- v2
The arXiv comment reads: Accepted to ACM CCS 2021
Sources reviewed
Reviewed against the paper and its primary sources. Cite the original authors using the linked paper or BibTeX.