A practical analysis of the robustness and stability of the network stack in smartphones

Proceedings of 11th International Conference on Computer and Information Technology, ICCIT 2008

Volumn , Issue , 2008, Pages 393-398

  Habib, Sheikh Mahbub ^a   Jacob, Cyril ^a   Olovsson, Tomas ^a  

^a CHALMERS UNIVERSITY OF TECHNOLOGY   (Sweden)

Author keywords

Network scanning; Network stack; Penetration testing; Smartphones; Vulnerability scanning

Indexed keywords

NETWORK SCANNING; NETWORK STACK; PENETRATION TESTING; SMARTPHONES; VULNERABILITY SCANNING;

COMPUTER OPERATING SYSTEMS; COMPUTER VIRUSES; INTERNET; LAPTOP COMPUTERS; NETWORK LAYERS; SCANNING; SYSTEM STABILITY; WINDOWS; WIRELESS NETWORKS;

NETWORK SECURITY;

EID: 66149163213     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICCITECHN.2008.4803083     Document Type: Conference Paper

References (19)

1. Andrew Bittau, Mark Handley, Joshua Lackey, "The Final Nail in WEP's Coffin", http://tapir.cs.ucl.ac.uk/bittauwep. pdf, Accessed on 7th July 2008.
2. Jesse D'Aguanno, "Blackjacking-Owning the Enterprise via the Blackberry", http://www.praetoriang.net/ presentations/ blackjack.html, presented at Defcon 14-Las Vegas, NV 2006.
3. "Next Generation TCP/IP stack in Windows Vista and Windows Server 2008", http://technet.microsoft.com/svse/ library/bb878108(en-us).aspx .
4. "TCP/IP Architecture Model", http://msdn.microsoft.com/enus/ library/ms880936.aspx
5. "Dual Stack Architecture", http://msdn.microsoft.com/enus/ library/ms881720.aspx
6. CVE ID: CVE-2008-2160, "Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted (1) JPEG and (2) GIF images", http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008- 2160, Source: US- CERT/NIST, Release date: 12th May 2008.
7. http://www.microsoft.com/technet/solutionaccelerators/mobile /maintain/SecModel/aff7cf7f-0e11-4ef4-8626-f33bd969b35a. mspx?mfr=true , Accessed on 21st April 2008.
8. John Wack, Miles Tracy, Mrurgiah Souppaya, "Guideline on Network Security Testing", NIST Special Publication 800-42, October 2003.
9. Nmap security scanner v4.20, http://nmap.org/, 2008.
10. Nessus Vulnerability Scanner v3.2.1, http://www.nessus.org/nessus/, released on 30th May 2008.
11. Wireshark v.1.0.2, http://www.wireshark.org/ .
12. Ofir Arkin, Josh Anderson, "Ethernet frame padding information leakage", Copyright @stake Inc. 2003.
13. Dug Song, "Dsniff 2.3 ", http://monkey.org/~dugsong/dsniff/ .
14. CVE ID: CVE-2006-10021 "IGMP v3 DoS Vulnerability", http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-0021, National Vulnerability Database, National Institute of Standards and Technology, Published on February 14, 2006.
15. Alexey Sintsov, "Microsoft Windows XP/2003 (IGMP v3) Denial of Service Exploit (MS06-007)", http://secwatch.org/exploits/2006/03/MS06-007- exp.c.info, Published on March 22, 2006.
16. Collin Richard Mulliner, "Security of Smart Phones", Master's Thesis submitted in University of California, Santa Barbara, June, 2006.
17. Tim Newsham Jim Hoaglund, "Windows Vista Network Attack Surface Analysis: A Broad Overview", Symantec Advanced Thread Research.
18. "TCP/IP Architecture", http://www.microsoft.com/technet/ archive/winntas/maintain/tcparch.mspx?mfr=true
19. "Vulnerability in TCP/IP Could Allow Denial of Service (913446)", http://www.microsoft.com/technetsecuritybulletin/ ms06-007.mspx, 14th March 2006.