Research of discovering vulnerabilities of NFC applications on Android platform
To improve the security of NFC technology,a research is done for discovering NDEF vulnerabilities of NFC applications on Android platform,and a method of bug hunting is proposed on based Fuzzing technology.The method adopts manual craft,the generation and the mutation strategies to construct test ca...
Saved in:
Main Authors: | , , |
---|---|
Format: | Article |
Language: | zho |
Published: |
Editorial Department of Journal on Communications
2014-11-01
|
Series: | Tongxin xuebao |
Subjects: | |
Online Access: | http://www.joconline.com.cn/zh/article/doi/10.3969/j.issn.1000-436x.2014.z2.016/ |
Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
_version_ | 1841539660062392320 |
---|---|
author | Zhi-qiang WANG Qi-xu LIU Yu-qing ZHANG |
author_facet | Zhi-qiang WANG Qi-xu LIU Yu-qing ZHANG |
author_sort | Zhi-qiang WANG |
collection | DOAJ |
description | To improve the security of NFC technology,a research is done for discovering NDEF vulnerabilities of NFC applications on Android platform,and a method of bug hunting is proposed on based Fuzzing technology.The method adopts manual craft,the generation and the mutation strategies to construct test cases,and uses two assistant means of analyzing and constructing test cases,including reverse message anylysis and packet sniffing.Then,NFC applications’ vulnerabilities with constructed test cases and output results are discovered.According to the method,a system called ANDEFVulFinder is developed for discovering the security vulnerabilities of NFC applications.The tool logcat and process monitoring are used to monitor targets’ exceptions during the discovering process,and the test is automated |
format | Article |
id | doaj-art-6d8ce377ac4f401fb00d37b596317eae |
institution | Kabale University |
issn | 1000-436X |
language | zho |
publishDate | 2014-11-01 |
publisher | Editorial Department of Journal on Communications |
record_format | Article |
series | Tongxin xuebao |
spelling | doaj-art-6d8ce377ac4f401fb00d37b596317eae2025-01-14T06:45:09ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2014-11-013511712359689103Research of discovering vulnerabilities of NFC applications on Android platformZhi-qiang WANGQi-xu LIUYu-qing ZHANGTo improve the security of NFC technology,a research is done for discovering NDEF vulnerabilities of NFC applications on Android platform,and a method of bug hunting is proposed on based Fuzzing technology.The method adopts manual craft,the generation and the mutation strategies to construct test cases,and uses two assistant means of analyzing and constructing test cases,including reverse message anylysis and packet sniffing.Then,NFC applications’ vulnerabilities with constructed test cases and output results are discovered.According to the method,a system called ANDEFVulFinder is developed for discovering the security vulnerabilities of NFC applications.The tool logcat and process monitoring are used to monitor targets’ exceptions during the discovering process,and the test is automatedhttp://www.joconline.com.cn/zh/article/doi/10.3969/j.issn.1000-436x.2014.z2.016/near field communicationmobile devicesFuzzingvulnerability discovering |
spellingShingle | Zhi-qiang WANG Qi-xu LIU Yu-qing ZHANG Research of discovering vulnerabilities of NFC applications on Android platform Tongxin xuebao near field communication mobile devices Fuzzing vulnerability discovering |
title | Research of discovering vulnerabilities of NFC applications on Android platform |
title_full | Research of discovering vulnerabilities of NFC applications on Android platform |
title_fullStr | Research of discovering vulnerabilities of NFC applications on Android platform |
title_full_unstemmed | Research of discovering vulnerabilities of NFC applications on Android platform |
title_short | Research of discovering vulnerabilities of NFC applications on Android platform |
title_sort | research of discovering vulnerabilities of nfc applications on android platform |
topic | near field communication mobile devices Fuzzing vulnerability discovering |
url | http://www.joconline.com.cn/zh/article/doi/10.3969/j.issn.1000-436x.2014.z2.016/ |
work_keys_str_mv | AT zhiqiangwang researchofdiscoveringvulnerabilitiesofnfcapplicationsonandroidplatform AT qixuliu researchofdiscoveringvulnerabilitiesofnfcapplicationsonandroidplatform AT yuqingzhang researchofdiscoveringvulnerabilitiesofnfcapplicationsonandroidplatform |