the goto page for communication protocol engineering and protocol testing resources.

  home  |   find tools  |   topics  |   job listings  

tools
traffic generators
design and verification
robustness test suites    
theory
books
proceedings    
papers
people.places
centers
researchers
conferences/workshops
university Courses
vendors
vendor list
test suites

 

Towards More Secure Protocol Implementations

Robustness testing, sometimes also referred to as "strong conformance testing", involves testing a protocol implementation for unexpected inputs.

One way to do this is to input random garbage to the protocol stack and hope that it triggers an unexpected code path. Tools called "fuzzers" use this approach. The more intelligent approach is to input a sequence of messages which will move the state machine into a known state, and then provide unexpected or random input at each possible state. This approach gives you some guarantees about the extent of the test coverage.

The list below includes software based robustness tests that are predesigned (meaning they are not test design frameworks) and are not hardware based. Fuzzers and boxes will be covered in a separate section.