Input Fuzzing for Network-based Attack Vector on Smartphones -- 2022 IEEE International IOT, Electronics and Mechatronics Conference (IEMTRONICS) Academic Article uri icon

Abstract

  • In the last decade, smartphones have evolved tremendously. They became powerful computers that fit in our pockets. Today, with the huge adoption of smartphones. Smart-phone security has become essential. Nowadays, a smartphone has become a complex piece of equipment that a single device incorporates users, Operating systems, manufacturers, carriers, and app developers. With such complexity, smartphones can be subject to many attack vectors. This paper explores one of them which is network-based attacks on cell phones. This paper discusses the several types of attacks then, it proposes an input fuzzing system for network-based attacks on phone. The proposed system is novel, as today for the previously mentioned attack vector, fuzzing is done using an emulator. This paper introduce a new fuzzing system for smartphones that addresses network-based attacks. This is done by setting up a network environment using SDRs. The proposed setup allows fuzz testing for Smartphones and baseband OSes for network-based attacks coming through SMS, WAP, and calls.

Publication Date

  • 2022-06-01

Published In