Implementation and Evaluation of an Assisting Fuzzer Harness Generation Tool for AUTOSAR Code
- The digitalization in vehicles tends to add more connectivity such as over-the-air (OTA) updates. To achieve this digitization, each ECU (Electronic Control Unit) becomes smarter and needs to support more and more different externally available protocols such as TLS, which increases the attack surface for attackers. To ensure the security of a vehicle, fuzzing has proven to be an effective methodThe digitalization in vehicles tends to add more connectivity such as over-the-air (OTA) updates. To achieve this digitization, each ECU (Electronic Control Unit) becomes smarter and needs to support more and more different externally available protocols such as TLS, which increases the attack surface for attackers. To ensure the security of a vehicle, fuzzing has proven to be an effective method to discover memory-related security vulnerabilities. Fuzzing the software run- ning on a ECU is not an easy task and requires a harness written by a human. The author needs a deep understanding of the specific service and protocol, which is time consuming. To reduce the time needed by a harness author, this thesis aims to develop FuzzAUTO, the first assistant harness generation tool targeting the AUTOSAR (AUTomotive Open System ARchitecture) BSW (Basic Software) to support manual harness generation.…
Document Type: | Bachelor Thesis |
---|---|
Zitierlink: | https://opus.hs-offenburg.de/8354 | Bibliografische Angaben |
Title (English): | Implementation and Evaluation of an Assisting Fuzzer Harness Generation Tool for AUTOSAR Code |
Author: | Tobias Müller |
Advisor: | Daniel Hammer, Steffen Sanwald |
Year of Publication: | 2024 |
Publishing Institution: | Hochschule Offenburg |
Granting Institution: | Hochschule Offenburg |
Contributing Corporation: | Mercedes Benz Tech Innovation |
Place of publication: | Offenburg |
Publisher: | Hochschule Offenburg |
Page Number: | 54 |
Language: | English | Inhaltliche Informationen |
Institutes: | Fakultät Medien (M) (ab 22.04.2021) |
Collections of the Offenburg University: | Abschlussarbeiten / Bachelor-Studiengänge / UNITS |
DDC classes: | 000 Allgemeines, Informatik, Informationswissenschaft |
GND Keyword: | AUTOSAR |
Tag: | Fuzzing; Harness; Rust | Formale Angaben |
Open Access: | Closed Access |
Licence (German): | Urheberrechtlich geschützt |