This repository contains all the code associated with Vulcan, our state-aware fuzzing tool for WearOS. The technical details are in the following paper:
- Edgardo Barsallo Yi, Heng Zhang, Amiya Maji, Kefan Xu, and Saurabh Bagchi, "Vulcan: Lessons in Reliability of Wearables through State-Aware Fuzzing," Mobisys 2020.
The repository includes the following:
- attacker. Attacker based on Intent injection campaigns. The project is used to determine the minimum working set needed to trigger system reboots on Wear OS. The following experiments can be :
- Rate. The rate to collect data from the sensors installed on the smartwatch.
- Inter-device communication. Communication between both paired devices, mobile and smartwatch.
- defender-poc. Proof-Of-Concept defender mechanism. The project implements a security mechanism based on an intermediate buffer for Intents. This mitigation mechanism helps to minimize system reboots.
- ua-test. Toy app for the wearable used to measure the impact on the user experience of our PoC defender mechanism.
- vulcan. Vulcan Stateful Fuzzer.