Patent ID: 8250658
Filing Date: 2012-08-21
Classification: G06F,H04L

Abstract:
1. A method for using a dynamic security analyzer to generate a dynamic attack on a device under analysis (DUA) by applying the attack to an exchange of a series of related messages with the DUA according to a communication protocol, comprising: determining with the security analyzer a set of one or more variants that exist in the exchange of related messages, wherein the exchange of related messages comprises at least first, second and third related messages according to the communication protocol, the first message being sent to the DUA, the second message being a response from the DUA to the first message, and the third message being sent to the DUA and depending, at least in part, on the content of the second message, and wherein each variant of the set of one or more variants describes a target message field and a mutation to apply to the target message field; identifying with the security analyzer the first message, wherein the first message is to be sent to the DUA; determining with the security analyzer whether the first message supports a first variant selected from the set of one or more variants; conditioned upon determining that the first message does not support the first variant, sending with the security analyzer the first message to the DUA; in response to the first message receiving with the security analyzer the second message from the DUA; after receiving the second message, identifying with the security analyzer the third message to the DUA that responds to the second message according to the communication protocol, the content of the third message depending, at least in part, on content of the second message; determining with the security analyzer whether the third message supports the first variant; conditioned upon determining that the first message did not support the first variant and that the third message does support the first variant, mutating the third message with the security analyzer according to the first variant to produce a third mutated message; and sending to the DUA the third mutated message with the security analyzer.