• Journal of information and communication convergence engineering
• /
• v.7 no.4
• /
• pp.570-575
• /
• 2009

This paper describes an implementation of project-based learning in routing design course. The total students who enrolled in the class were 48 and were divided into groups of 3~4 students. At the beginning of the course, a survey was conducted to check the student's level of back ground knowledge acquired from the prerequisite courses. At the end of the curse, we also conducted a survey to evaluate the effect of project-based learning. According to the end of course survey, the course was helpful to identify the problems to solve by themselves, to develop the problem solving ability, and to understand the global picture of the subject by integrating knowledge of each chapter into a project. The survey also shows that students recognized the importance of the teamwork skill throughout the project activity.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.7 no.8
• /
• pp.1989-2009
• /
• 2013

How to discover router vulnerabilities effectively and automatically is a critical problem to ensure network and information security. Previous research on router security is mostly about the technology of exploiting known flaws of routers. Fuzzing is a famous automated vulnerability finding technology; however, traditional Fuzzing tools are designed for testing network applications or other software. These tools are not or partly not suitable for testing routers. This paper designs a framework of discovering router protocol vulnerabilities, and proposes a mathematical model Two-stage Fuzzing Test Cases Generator(TFTCG) that improves previous methods to generate test cases. We have developed a tool called RPFuzzer based on TFTCG. RPFuzzer monitors routers by sending normal packets, keeping watch on CPU utilization and checking system logs, which can detect DoS, router reboot and so on. RPFuzzer' debugger based on modified Dynamips, which can record register values when an exception occurs. Finally, we experiment on the SNMP protocol, find 8 vulnerabilities, of which there are five unreleased vulnerabilities. The experiment has proved the effectiveness of RPFuzzer.