Creating a Fuzzer for Diameter and LTE Telecom Protocols

This talk explains how to create a fuzzer for the Diameter protocol used in LTE core networks. It covers protocol-specific architecture, existing protocol stacks, telecom test-lab tooling, reliable vulnerability reproduction, and communicating findings to mobile network operators.

Syllabus

Intro
Enter Header
Data Types
GLT
Software
BES
Test Lab
Problems
IPX Network
Why create a Fuzzer
Existing protocol implementations
Message types
Limitations
Enemy
Menos
Other problems
Fuzzing
Mutations
Nested TVP
Stateful Checks
Messages
Connections
emulators
hot pots
system time
Typical project
Ask for access
Presenting results
Key takeaways
Summary
Live Questions
One More Question
We Dont Do This Often
How To Do It