Design And Implementation Of Fuzzy Testing System For 5G Network Protocol

As the basis of communication between network elements in 5G,the 5G network protocol is an important part of the 5G technology system,and the security research of the 5G network protocol is also an important part of the 5G security research.Fuzz testing is a commonly used vulnerability mining technology.Due to its automatic characteristics,it has been widely used in network protocol security research.Using fuzz testing technology to study 5G network protocol security can avoid complex protocol analysis and formal modeling..However,the current method of fuzz testing for 5G network protocols is not perfect,and there are problems such as poor versatility,difficult engineering implementation,and less consideration of specific protocol characteristics.Therefore,the study of fuzz testing for 5G network protocols will help to find the loopholes in 5G network protocols,which is of great significance to 5G security research.Aiming at the problems existing in the existing research on fuzz testing for 5G network protocols,this paper studies the general fuzz testing methods for 5G network protocols and the fuzz testing methods for specific 5G network protocols.The main results obtained during the research process are:1.Design and implement a general fuzzing method for 5G network protocols.A fuzzing method including initial use case collection,simulation environment construction,acquisition of code coverage information based on the simulation environment,data packet mutation and transmission has been implemented.Experiments show that the proposed fuzzing method can find loopholes in 5G network protocols,the fuzzing method has a certain effect.2.Optimized the fuzz testing method of PFCP(Packet Forwarding Control Protocol)protocol.According to the characteristics of the PFCP protocol,the fuzzing method of the PFCP protocol is optimized from two aspects of maintaining association and considering the status of the protocol server,which improves the code coverage of the fuzzing test and discovers new vulnerabilities.3.Optimized the fuzz testing method of NGAP(Next Generation Application Protocol)protocol.The three states of the NGAP server were analyzed,and the NGAP protocol was comprehensively and completely fuzzed in the three states of gNB unregistered,gNB registered and UE(User Equipment)registered,and new vulnerabilities were found.4.In view of the lack of automation tools in the existing research on 5G network protocols,and the relatively cumbersome operations in the command line,the fuzzing test web system was designed and implemented.The system mainly includes login and registration,protocol selection,test start,and test log viewing,User management and other functions.