Test Suite:
IPv4 Test SuiteDirection:
ServerEstimates show that up to 800-900 million people depend on IPv4 for their daily communications needs. Since the inception of the Internet, IPv4 has assumed an unprecedented importance in the global scale. IPv4 implementations are found in almost all modern computer systems. This includes routers, switches, firewalls, desktop and server systems, laptops, PDAs, cell phones and other mobile systems, as well as a large number of various embedded systems. All of these devices are vulnerable to exploitation through externally-supplied malformed protocol data. Effects of malicious data range from transient parsing errors to complete system takeovers. As IPv4 and its associated protocols (TCP, UDP, ICMP, IGMP, ARP) are in an extremely crucial role in modern society, the dependability and reliability of IPv4 implementations must be verified. IPv4 implementations are often tightly coupled with the underlying operating system, which means that serious flaws in IPv4 protocol handling may easily result in total system compromises. Defensics IPv4 Test Suite helps prevent this by making IPv4 implementations more robust.
Used specifications
ISA Security Compliance Institute - Embedded Device Security Assurance - Testing the robustness of implementations of the IETF IPv4 network protocol - Version 1.31
ISA Security Compliance Institute - Embedded Device Security Assurance - Testing the robustness of implementations of the IETF UDP transport protocol over IPv4 or IPv6 - Version 2.6
User Datagram Protocol
Internet Protocol Specification
Internet Control Message Protocol
Internet Standard Subnetting Procedure
A Standard for the Transmission of IP Datagrams over IEEE 802 Networks
IP MTU Discovery Options
U.S. Department of Defense: Security Options for the Internet Protocol
Requirements for Internet Hosts -- Communication Layers
Path MTU Discovery
EIP: The Extended Internet Protocol: A Framework for Maintaining Backward Compatibility
Traceroute Using an IP Option
TP/IX: The Next Internet
IPv4 Option for Sender Directed Multi-Destination Delivery
Requirements for IP Version 4 Routers
IP Router Alert Option
Internet Protocol, Version 6 (IPv6) Specification
Definition of the differentiated services field (DS field) in the IPv4 and IPv6 headers
An Architecture for Differentiated Services
The Addition of Explicit Congestion Notification (ECN) to IP
New Terminology and Clarifications for Diffserv
The Security Flag in the IPv4 Header
Experimental Values in IPv4, IPv6, ICMPv4, ICMPv6, UDP, and TCP Headers
Quick-Start for TCP and IP
Extended ICMP to Support Multi-Part Messages
IANA Considerations for the IPv4 and IPv6 Router Alert Options
Tool-specific information
Test tool general features
- Fully automated black-box negative testing
- Ready-made test cases
- Written in Java(tm)
- GUI command line remote interface modes
- Instrumentation (health-check) capability
- Support and maintenance
- Comprehensive user documentation
- Results reporting and analysis