TLS clients testing

The paper presents a model-based approach to conformance testing of TLS implementations. It discusses the formal model of TLS protocol, the structure of the test suite. JavaTesK tool, based on UniTESK technology, was used to develop the test suite. A set of fuzz operators was developed for general d...

Ausführliche Beschreibung

Gespeichert in:

Bibliographische Detailangaben
Veröffentlicht in:	Trudy Instituta sistemnogo programmirovaniâ 2018-10, Vol.27 (2), p.145-160
Hauptverfasser:	Nikeshin, A.V., Pakulin, N.V., Shnitman, V.Z.
Format:	Artikel
Sprache:	eng
Schlagworte:	ssl tls unitesk верификация мутационное тестирование тестирование тестирование с использованием моделей формальные методы формальные спецификации
Online-Zugang:	Volltext
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!

Beschreibung
Zusammenfassung:	The paper presents a model-based approach to conformance testing of TLS implementations. It discusses the formal model of TLS protocol, the structure of the test suite. JavaTesK tool, based on UniTESK technology, was used to develop the test suite. A set of fuzz operators was developed for general data types and included in the test suite. We applied the test suite to a several popular implementations of TLS client, and present brief results. This approach has proved his efficiency, various errors and vulnerabilities had been found in all chosen TLS implementations.
ISSN:	2079-8156 2220-6426
DOI:	10.15514/ISPRAS-2015-27(2)-9