Vehicle USB Fuzzing via Malformed Media Files and Kernel Logs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current vehicle fuzzing methods are limited to application-level testing, cannot perform kernel-level fuzzing, require manual intervention, and are inefficient in processing large numbers of files, making it difficult to detect security vulnerabilities in vehicle infotainment systems effectively.
Innovation Solution
A vehicle USB fuzzing method and apparatus that allows direct transmission of malformed files through a USB port, capable of fuzzing both application and kernel levels, with automated error detection and logging, eliminating the need for manual intervention and enabling efficient processing of multiple files.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If manual fuzzing process is used with media player, then application-level fuzzing is possible, but kernel-level fuzzing is impossible and manual intervention is required
Solution Approach 1:
The patent introduces a USB gadget mode as an intermediary mechanism that enables direct communication between the fuzzing apparatus and the vehicle's USB port. This mediator allows automated transmission of malformed files to the vehicle's media player and kernel, achieving both application-level and kernel-level fuzzing without manual intervention while maintaining the existing media player interface
Solution Approach 2:
The fuzzing apparatus is designed to perform multiple fuzzing functions through a single USB connection: it can transmit malformed files to test both the media player application and the kernel driver, simultaneously achieving application-level and kernel-level fuzzing with one unified system
2Productivity
If media player replays files sequentially, then error detection is possible, but processing speed is slow and manual repetition is required
Solution Approach 1:
The fuzzing apparatus continuously generates and transmits malformed files to the vehicle through the USB port without interruption. The system maintains continuous operation by automatically feeding malformed files to the media player and monitoring for errors, eliminating the need for manual repetition and significantly increasing fuzzing throughput
Solution Approach 2:
The fuzzing apparatus automatically performs the entire fuzzing process including generating malformed files, transmitting them via USB, and detecting errors through kernel log monitoring. The system serves itself by eliminating the need for manual intervention in file generation and error detection
3Quantity of substance
If limited number of files are processed at a time, then error detection is accurate, but large-scale fuzzing is inefficient
Solution Approach 1:
The fuzzing apparatus pre-generates a large number of malformed files in advance before transmission to the vehicle. By preparing multiple malformed files beforehand and transmitting them in batches through the USB port, the system efficiently processes large quantities of files without sacrificing error detection accuracy
Data Source
AI summary
A vehicle USB fuzzing method by a vehicle USB fuzzing apparatus connected to an in-vehicle infotainment (IVI) device comprises: generating malicious files by mutating a seed file; mounting the apparatus to the vehicle so the IVI device or head unit controller recognizes the malicious files; transmitting a predetermined number of malicious files to the vehicle; unmounting the apparatus after transmission; monitoring the kernel log generated in the apparatus while the malicious media files are replayed or attempted to be replayed in the vehicle; checking for errors in USB-related logs; and determining the fuzzing result based on the presence of such errors.