Later archive addition
Protocol State Fuzzing of TLS Implementations
State machine learning infers a protocol state machine from a TLS implementation using black-box testing alone, exposing message sequences the code accepts but the standard does not. Inspecting the inferred machines revealed new security flaws in GnuTLS, the Java Secure Socket Extension and OpenSSL, and the distinct machines also fingerprint implementations.
Record
- Researcher
- Joeri de Ruiter and Erik Poll
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Joeri de Ruiter and Erik Poll, first published at the original source. Preserved copies are kept so the citation survives its host.