System and method of fuzzing prevention using intentional responses that appear to be randomized

Patent metadata

Field	Value
Publication number	US-12346839-B2
Application number	US-202217993735-A
Country	US
Kind code	B2
Filing date	Nov 23, 2022
Priority date	Nov 23, 2022
Publication date	Jul 1, 2025
Grant date	Jul 1, 2025

Abstract

A system and method of responding to fuzzing including receiving a fuzzing input while in fuzzed mode, performing a perceptual hashing function using the fuzzing input to generate a perceptual hash value, selecting an action from a list of actions using the perceptual hash value, and performing the selected action in response to the fuzzing input. Parameters may be generated using the perceptual hash value for actions that use parameters. Instead of normal hashing, perceptual hashing generates the same hash value for substantially similar fuzzing inputs so that corresponding fuzzing response actions appear to be random but instead are intentional. Hardware or software version numbers may be combined with a shared secret key and hashed using a non-perceptual hashing function to further impede comparison analysis by a fuzzer. Some embodiments combine perceptual hashing with non-perceptual hashing, such as cryptographic hashing or the like.

First claim

What is claimed is:

1. A method of responding to fuzzing at a service provider device, the method comprising:
receiving a fuzzing input at a service provider including a controller that is in a fuzzed mode;
performing, using a perceptual hash generator of a responder circuit of the controller, a perceptual hashing function using the fuzzing input to generate a perceptual hash value;
selecting, using an action selector of the responder circuit, an action from a plurality of predetermined actions based on a selected value related to the perceptual hash value; and
performing the selected action in response to the fuzzing input.

2. The method of claim 1 , wherein said performing a perceptual hashing function using the fuzzing input comprises generating, using the perceptual hash generator of the responder circuit, the perceptual hash value, wherein the perceptual hash value is the same for a subset of a plurality of possible fuzzing inputs that are considered similar.

3. The method of claim 1 , wherein prior to performing the selected action, the method further comprising generating, using a parameter generator, at least one parameter based on at least a portion of the selected value, wherein the at least one parameter is used by the selected action when performed.

4. The method of claim 3 , wherein:
said selecting the action comprises determining, using the action selector of the responder circuit, the action from the plurality of predetermined actions based on a first portion of the selected value related to the perceptual hash value; and
wherein said generating the at least one parameter comprises determining, using the parameter generator, the at least one parameter based on a second portion of the selected value.

5. The method of claim 1 , further comprising:
combining, using a concatenator of the responder circuit, at least one version number, a shared secret key, and the perceptual hash value to produce a combined value;
performing, using a non-perceptual hash generator, a non-perceptual hash function on the combined value to produce a revised hash value;
providing the perceptual hash value to a first input of a multiplexer and the revised hash value to a second input of the multiplexer, the multiplexer including an output coupled to the action selector; and
providing, from the controller of the responder circuit, a selection input signal to a control input of the multiplexer to selectively provide one of the perceptual hash value or the revised hash value as the selected value to the action selector.

6. The method of claim 1 , further comprising:
combining, using a concatenator of the responder circuit, at least one version number and a secret key to produce a combined value;
performing, using a non-perceptual hash generator of the responder circuit, a non-perceptual hash function on the combined value to produce a hash value;
combining, using a second concatenator of the responder circuit, the hash value with the perceptual hash value to produce a second combined value;
performing, using a second perceptual hash generator of the responder circuit, a perceptual hash function on the second combined value to produce a revised hash value;
providing the perceptual hash value to a first input of a multiplexer and the revised hash value to a second input of the multiplexer, the multiplexer including an output coupled to the action selector; and
providing, from the controller of the responder circuit, a selection input signal to a control input of the multiplexer to selectively provide one of the perceptual hash value or the revised hash value as the selected value to the action selector.

7. The method of claim 6 , further comprising:
combining, using a concatenator of the responder circuit, at least one version number and a secret key to produce a combined value; and
performing, using a non-perceptual hash generator of the responder circuit, a non-perceptual hashing function on the combined value to produce a hash value;
combining, using a second concatenator of the responder circuit, the hash value with the fuzzy input to produce a second combined value;
performing, using a second perceptual hash generator of the responder circuit, a perceptual hash function on the second combined value to produce a revised hash value
providing the perceptual hash value to a first input of a multiplexer and the revised hash value to a second input of the multiplexer, the multiplexer including an output coupled to the action selector; and
providing, from the controller of the responder circuit, a selection input signal to a control input of the multiplexer to selectively provide one of the perceptual hash value or the revised hash value as the selected value to the action selector.

8. A device including a fuzzing responder circuit, the device comprising:
a perceptual hash generator configured to receive a fuzzing input and to perform a perceptual hashing function using the fuzzing input to generate a perceptual hash value;
a concatenator coupled to the perceptual hash generator and configured combine at least one version number, a shared secret key, and either the fuzzing input or the perceptual hash value to generate a revised hash value;
a multiplexer including a first input to receive the perceptual hash value, a second input to receive the revised hash value, a control input, and an output;
a controller coupled to the control input, the controller to provide a control signal to the multiplexer to provide a selected hash value to the output, the selected hash value comprising one of the revised hash value and the perceptual hash value; and
an action selector coupled to the output of the multiplexer and configured to select an action from a predetermined list of actions based on at least a portion of the selected hash value; and
performing the selected action in response to the fuzzing input.

9. The device of claim 8 , further comprising a parameter generator coupled to the output of the multiplexer and to the action selector, the parameter generator configured to use a first portion of the selected hash value to generate at least one parameter for the selected action and to provide the at least one parameter to the action generator, and the action selector configured to use a second portion of the selected hash value to determine the selected action.

10. The device of claim 9 , wherein the action selector is configured to use a first portion of the selected hash value to determine the selected action and wherein the parameter generator is configured to use a second portion of the selected hash value to generate the at least one parameter.

11. The device of claim 8 , further comprising:
a first combiner configured to combine at least one version number and a shared secret key to produce a combined value and to provide the combined value to an output; and
a non-perceptual hash generator coupled to the output of the first combiner and configured to perform a non-perceptual hash function on the combined value to generate a hash value, the non-perceptual hash generator configured to provide the hash value to the concatenator for combining with either the fuzzing input or the perceptual hash value.

12. The device of claim 11 , wherein the non-perceptual hash generator comprises cryptographic hash generator.

13. The device of claim 11 , wherein the selected action is selected from a group consisting of rebooting the device, logging out a current user of a source associated with the fuzzing input, deleting at least a portion of a configuration of the device, deleting user code data, resetting the device to default settings, deleting keys, deletin

Assignees

• Nxp Bv

Inventors

• Veshchikov Nikita

Classifications

• H04L9/0643

  Hash functions, e.g. MD5, SHA, HMAC or f9 MAC · CPC title

• H04L9/0618

  Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation · CPC title

• G06N7/026

  Development tools for entering the parameters of a fuzzy system · CPC title

• G06F18/2185

  the supervisor being an automated module, e.g. intelligent oracle · CPC title

• G06F21/554

  involving event detection and direct action · CPC title