Research of discovering vulnerabilities of NFC applications on Android platform

To improve the security of NFC technology,a research is done for discovering NDEF vulnerabilities of NFC applications on Android platform,and a method of bug hunting is proposed on based Fuzzing technology.The method adopts manual craft,the generation and the mutation strategies to construct test ca...

Full description

Saved in:
Bibliographic Details
Main Authors: Zhi-qiang WANG, Qi-xu LIU, Yu-qing ZHANG
Format: Article
Language:zho
Published: Editorial Department of Journal on Communications 2014-11-01
Series:Tongxin xuebao
Subjects:
Online Access:http://www.joconline.com.cn/zh/article/doi/10.3969/j.issn.1000-436x.2014.z2.016/
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1841539660062392320
author Zhi-qiang WANG
Qi-xu LIU
Yu-qing ZHANG
author_facet Zhi-qiang WANG
Qi-xu LIU
Yu-qing ZHANG
author_sort Zhi-qiang WANG
collection DOAJ
description To improve the security of NFC technology,a research is done for discovering NDEF vulnerabilities of NFC applications on Android platform,and a method of bug hunting is proposed on based Fuzzing technology.The method adopts manual craft,the generation and the mutation strategies to construct test cases,and uses two assistant means of analyzing and constructing test cases,including reverse message anylysis and packet sniffing.Then,NFC applications’ vulnerabilities with constructed test cases and output results are discovered.According to the method,a system called ANDEFVulFinder is developed for discovering the security vulnerabilities of NFC applications.The tool logcat and process monitoring are used to monitor targets’ exceptions during the discovering process,and the test is automated
format Article
id doaj-art-6d8ce377ac4f401fb00d37b596317eae
institution Kabale University
issn 1000-436X
language zho
publishDate 2014-11-01
publisher Editorial Department of Journal on Communications
record_format Article
series Tongxin xuebao
spelling doaj-art-6d8ce377ac4f401fb00d37b596317eae2025-01-14T06:45:09ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2014-11-013511712359689103Research of discovering vulnerabilities of NFC applications on Android platformZhi-qiang WANGQi-xu LIUYu-qing ZHANGTo improve the security of NFC technology,a research is done for discovering NDEF vulnerabilities of NFC applications on Android platform,and a method of bug hunting is proposed on based Fuzzing technology.The method adopts manual craft,the generation and the mutation strategies to construct test cases,and uses two assistant means of analyzing and constructing test cases,including reverse message anylysis and packet sniffing.Then,NFC applications’ vulnerabilities with constructed test cases and output results are discovered.According to the method,a system called ANDEFVulFinder is developed for discovering the security vulnerabilities of NFC applications.The tool logcat and process monitoring are used to monitor targets’ exceptions during the discovering process,and the test is automatedhttp://www.joconline.com.cn/zh/article/doi/10.3969/j.issn.1000-436x.2014.z2.016/near field communicationmobile devicesFuzzingvulnerability discovering
spellingShingle Zhi-qiang WANG
Qi-xu LIU
Yu-qing ZHANG
Research of discovering vulnerabilities of NFC applications on Android platform
Tongxin xuebao
near field communication
mobile devices
Fuzzing
vulnerability discovering
title Research of discovering vulnerabilities of NFC applications on Android platform
title_full Research of discovering vulnerabilities of NFC applications on Android platform
title_fullStr Research of discovering vulnerabilities of NFC applications on Android platform
title_full_unstemmed Research of discovering vulnerabilities of NFC applications on Android platform
title_short Research of discovering vulnerabilities of NFC applications on Android platform
title_sort research of discovering vulnerabilities of nfc applications on android platform
topic near field communication
mobile devices
Fuzzing
vulnerability discovering
url http://www.joconline.com.cn/zh/article/doi/10.3969/j.issn.1000-436x.2014.z2.016/
work_keys_str_mv AT zhiqiangwang researchofdiscoveringvulnerabilitiesofnfcapplicationsonandroidplatform
AT qixuliu researchofdiscoveringvulnerabilitiesofnfcapplicationsonandroidplatform
AT yuqingzhang researchofdiscoveringvulnerabilitiesofnfcapplicationsonandroidplatform