ATFuzzer: Dynamic Analysis Framework of AT Interface for Android Smartphones

Imtiaz Karim; Fabrizio Cicala; Syed Rafiul Hussain; Omar Chowdhury; Elisa Bertino

doi:10.1145/3416125

Back

ATFuzzer: Dynamic Analysis Framework of AT Interface for Android Smartphones

Journal article

Open access

Peer reviewed

ATFuzzer: Dynamic Analysis Framework of AT Interface for Android Smartphones

Imtiaz Karim, Fabrizio Cicala, Syed Rafiul Hussain, Omar Chowdhury and Elisa Bertino

Digital threats (Print), Vol.1(4), 23

12/29/2020

DOI: 10.1145/3416125

Files and links (1)

url

https://doi.org/10.1145/3416125View

Published (Version of record) Open Access

Abstract

Application processors of modern smartphones use the AT interface for issuing high-level commands (or AT-commands) to the baseband processor for performing cellular network operations (e.g., placing a phone call). Vulnerabilities in this interface can be leveraged by malicious USB or Bluetooth peripherals to launch pernicious attacks. In this article, we propose ATFuzzer, which uses a grammar-guided evolutionary fuzzing approach that mutates production rules of the AT-command grammar instead of concrete AT commands to evaluate the correctness and robustness of the AT-command execution process. To automate each step of the analysis pipeline, ATFuzzer first takes as input the 3GPP and other vendor-specific standard documents and, following several heuristics, automatically extracts the seed AT command grammars for the fuzzer. ATFuzzer uses the seed to generate both valid and invalid grammars, following our cross-over and mutation strategies to evaluate both the integrity and execution of AT-commands. Empirical evaluation of ATFuzzer on 10 Android smartphones from 6 vendors revealed 4 invalid AT command grammars over Bluetooth and 14 over USB with implications ranging from DoS, downgrade of cellular protocol version, to severe privacy leaks. The vulnerabilities along with the invalid AT-command grammars were responsibly disclosed to affected vendors and assigned CVE’s.

Details

Title: Subtitle: ATFuzzer: Dynamic Analysis Framework of AT Interface for Android Smartphones
Creators: Imtiaz Karim - Purdue University West Lafayette
Fabrizio Cicala - Purdue University West Lafayette
Syed Rafiul Hussain - Pennsylvania State University
Omar Chowdhury - University of Iowa
Elisa Bertino - Purdue University West Lafayette
Resource Type: Journal article
Publication Details: Digital threats (Print), Vol.1(4), 23
DOI: 10.1145/3416125
ISSN: 2692-1626
eISSN: 2576-5337
Grant note: name: NSF, award: CNS-1657124, CNS-171939
Language: English
Date published: 12/29/2020
Academic Unit: Computer Science
Record Identifier: 9984259501302771

Metrics

6 Record Views