Preventing DoS attacks in NGN networks with proactive specification-based fuzzing

Next-generation networks introduce an IPbased network foundation and more powerful access technologies. As a result, vulnerabilities in network protocol implementations can be exploited with Internet hacking tools to cause denial-of-service and distributed denial of service situations. Fuzzing is a black-box testing technique originally used by crackers to find exploitable vulnerabilities. In this article, we demonstrate how specification-based fuzzers can be used to discover exploitable vulnerabilities proactively to make networks and devices more robust against DoS and DDoS attacks.