Cisco IOS Vulnerability Exploiting Method Based on Fuzzing

Currently there are no generic tools which can completely disassemble and debug Cisco Internetwork Operating System(IOS).This paper targets protocols Cisco routers support as vulnerable,and uses Fuzzing technology for security testing to mine vulnerabilities in the system.By combining characteristics of IOS structure,storage management and process scheduling,it designs and implements an automated vulnerability mining tool named CFuzzer,and uses it for IOS security tests for several protocols.Experimental results show that CFuzzer can provide effective security protection for Cisco routers.