Fuzzing Framework for Wireless Protocols (Bluetooth Low Energy)

Thesis typeMaster Thesis
SupervisorProf. Dr.-Ing. Thomas Schreck
Starting dateAs soon as possible
SkillsLaTeX, Git, Any programming language, Bluetooth, Fuzzing
LanguageEnglish (preferred), German
Industry cooperationnot possible
Publish date2024-06-17

Problem and context

Wireless communication protocols are integral to modern technology, yet their increasing complexity introduces vulnerabilities that can compromise security. Fuzzing has proven effective for identifying software vulnerabilities, but its application in the wireless domain remains underexplored.

Goals

This thesis proposes the development of a wireless fuzzing framework utilizing Software-Defined Radio (SDR) to analyze and test the robustness of wireless protocols, with Bluetooth Low Energy (BLE) as the primary example.

The proposed framework leverages the flexibility and programmability of SDR to generate and inject malformed or unexpected packets, simulating various attack vectors. BLE, a widely adopted protocol in IoT devices, serves as a testbed due to its prevalence and susceptibility to attacks. The framework will include features such as dynamic protocol emulation, customizable test cases, and automated analysis of device responses. By integrating these capabilities, the research aims to identify security flaws in BLE implementations and provide insights into broader wireless protocol testing.

This study will contribute to the cybersecurity field by offering a modular, extensible tool for protocol fuzzing and advancing understanding of wireless protocol vulnerabilities. The proposed framework’s scalability ensures its applicability to other wireless protocols, facilitating a proactive approach to securing wireless communication systems.

Literature