Smart City Gnosys

Smart city article details

Title	Program-Aware Fuzzing For Mqtt Applications
ID_Doc	43351
Authors	Rodriguez L.G.A.; Batista D.M.
Year	2020
Published	ISSTA 2020 - Proceedings of the 29th ACM SIGSOFT International Symposium on Software Testing and Analysis
DOI	http://dx.doi.org/10.1145/3395363.3402645
Abstract	Over the last few years, MQTT applications have been widely exposed to vulnerabilities because of their weak protocol implementations. For our preliminary research, we conducted background studies to: (1) determine the main cause of vulnerabilities in MQTT applications; and (2) analyze existing MQTT-based testing frameworks. Our preliminary results confirm that MQTT is most susceptible to malformed packets, and its existing testing frameworks are based on blackbox fuzzing, meaning vulnerabilities are difficult and time-consuming to find. Thus, the aim of my research is to study and develop effective fuzzing strategies for the MQTT protocol, thereby contributing to the development of more robust MQTT applications in IoT and Smart Cities. © 2020 ACM.
Author Keywords	Fuzzing; Internet of Things; MQTT; Security; Testing