Keysight Technologies, Inc.
Method and system for detecting anomalies of server and client

Abstract:

A method is provided for finding vulnerabilities of a server and a client communicating according to a communication protocol standard. The method includes establishing a connection between the server and client according to the communication protocol standard; generating valid packets from a communication protocol model, the valid packets being compliant with the communication protocol standard; generating mutated packets by mutating the valid packets according to mutation probabilities; sending the mutated packets from the server to the client or from the client to the server during different states of the communication protocol model; receiving first responses to the mutated packets; sending invalid packets from the server to the client or from the client to the server during different states of the communication protocol model; receiving second responses to the invalid packets; and identifying anomalies of the client or server based on the received first and/or second responses.