Fuzzing a MACsec Key Agreement Protocol Application

Abstract

Along this thesis, a popular testing technique to find bugs and vulnerabilities called fuzzing is implemented in order to exploit an application developed by Technica Electronics Barcelona S.L. First, a study of how the application works is required in order to properly design the tests. This application implements the MACsec (a layer 2 secure communication protocol) Key Agreement Protocol. Then, a testing environment is generated to test the software of Technica Electronics using fuzzing. Finally, results are analyzed to find any security vulnerabilities the application may present. Preliminary results showed that the code is already robust as no bugs were found.