Can I read Coverage-directed Differential Testing of X.509 Certificate Validation in SSL/TLS Implementations on EtoBox?

Coverage-directed Differential Testing of X.509 Certificate Validation in SSL/TLS Implementations by Pengbo Nie; Chengcheng Wan; Jiayu Zhu; Ziyi Lin; Yuting Chen; Zhendong Su is a Computer Science article available to read on EtoBox.

What is Coverage-directed Differential Testing of X.509 Certificate Validation in SSL/TLS Implementations about?

SSL and TLS are two secure protocols for creating secure connections over the Internet. X.509 certificate validation is important for security and needs to be performed before an SSL/TLS connection is established. Some advanced testing techniques, such as frankencert , have revealed, through randomly mutating Internet accessible certificates, that there exist unexpected, sometimes critical, validation differences among different SSL/TLS implementations. Despite these efforts, X.509 certificate validation still needs to be thoroughly tested as this work shows. This paper tackles this challenge by proposing transcert , a coverage-directed technique to much more effectively test real-world certificate validation code. Our core insight is to (1) leverage easily accessible Internet certificates as seed certificates, and (2) use code coverage to direct certificate mutation towards generating a set of diverse certificates. The generated certificates are then used to reveal discrepancies, thus potential flaws, among different certificate validation implementations. We implement transcert and evaluate it against frankencert , NEZHA , and RFCcert (three advanced fuzzing techniques) on five w

Who reads Coverage-directed Differential Testing of X.509 Certificate Validation in SSL/TLS Implementations?

Author

Pengbo Nie; Chengcheng Wan; Jiayu Zhu; Ziyi Lin; Yuting Chen; Zhendong Su

Publisher

ACM

Published

2022

Language

EN

Field

Computer Science (Physical Sciences)