ICPFuzzer: proprietary communication protocol fuzzing by using machine learning and feedback strategies

Pei-Yi Lin, Chia‐Wei Tien, Ting‐Chun Huang, Chin‐Wei Tien

Cybersecurity 2021 article cited by 14

importance 6/10 partially solved Software Testing and Debugging Techniques industrial cybersecurity stage: research

Fuzzing proprietary industrial control system communication protocols is difficult without prior knowledge of their customized, complicated structures.

Undiscovered vulnerabilities in industrial control systems could allow attacks on critical infrastructure.

ICPFuzzer uses an LSTM to learn protocol features and automatically generate mutated test data, using device responses and weight strategies to find inputs causing unusual connection states.

Effectiveness verified by comparison with an open-source tool; details truncated in abstract, no numbers stated.

Approach could find vulnerabilities in ICS devices without prior protocol knowledge, per authors' verification claim.

Venue Cybersecurity
Published 2021
Work type article
Authors Pei-Yi Lin, Chia‐Wei Tien, Ting‐Chun Huang, Chin‐Wei Tien
Citations 14 (OpenAlex, at import time)
References 32
Model or method LSTM
Organization not stated in source
Primary source https://doi.org/10.1186/s42400-021-00087-5
Open access diamond
Keywords fuzzing, LSTM, industrial control systems, protocol security, vulnerability discovery
6 / 10

significant — thousands to millions affected

ICS vulnerabilities threaten critical infrastructure (smart meters etc.); abstract calls threats huge but quantifies no scale; solution only partially verified.

Basis: inferred. Judged from the source text, which gives no explicit scale. Stated scale: not stated in source. Method and limits.

# Paper Year Citations Importance
1 ImageNet classification with deep convolutional neural networks
Alex Krizhevsky, Ilya Sutskever, Geoffrey E. Hinton
2017 106,345
8
2 Deep Residual Learning for Image Recognition
Kaiming He, Xiangyu Zhang, Shaoqing Ren, Jian Sun
2016 221,134
8
3 Faster sorting algorithms discovered using deep reinforcement learning
Daniel J. Mankowitz, Andrea Michi, Anton Zhernov, Marco Gelmi, Marco S...
2023 175
8
4 A deep learning‐based approach for software vulnerability detection using code metrics
Fazli Subhan, Xiaoxue Wu, Lili Bo, Xiaobing Sun, Muhammad Rahman
2022 42
7
5 Deep Learning-Based Attack Detection and Classification in Android Devices
Alfonso Gómez, Antonio Muñoz
2023 41
7