As part of VoIP threats series, I’d like to introduce Malformed Messages (or Protocol Fuzzing). An attacker may create and send malformed messages to the target server or client for the purpose of ...

If you have read my blog here before, you might know me from the PROTOS project, and maybe as an author on VoIP security. PROTOS was fun, but it is really far away from real fuzzing. VoIP was ...

Fuzz testing, or fuzzing, is a way of analysing a program to find inputs likely to result in exploitable errors. These typically cause some kind of vulnerability that a malicious attacker could ...