Protocol fuzzing to find security vulnerabilities of RabbitMQ

Abstract

A message broker is widely used to enable applications, systems, and services to communicate with each other. One of the widely used message brokers is RabbitMQ that provides various functions and stability. However, as presented in this paper, Rab-bitMQ is vulnerable. In this paper, we present how RabbitMQ is exploited by protocol fuzzing, which is a common way to find unknown vulnerabilities inherent in software. We describe our protocol fuzzing procedures in detail and present conducted results.

Transformative computing in security, big data analysis, and cloud computing applications

“…The seventh paper entitled "Protocol Fuzzing to Find Security Vulnerabilities of RabbitMQ" by Kwon et al 7 shows a new fuzzy protocol for systems and service communications. A message broker named RabbitMQ is developed to find unknown vulnerabilities inherent in software.…”

Microservice development using RabbitMQ message broker

“…Several authors investigated the use of RabbitMQ in microservice development. Kwon et al in [3] found that RabbitMQ is vulnerable and presented how it can be exploited by protocol fuzzing, which is a common way to find unknown vulnerabilities inherent in software. Nugroho and Kusumawardani in [4] demonstrated that RabbitMQ as a load-balancer can divide the workload equally, thus reducing the latency time of the Naïve Bayes Classifier classification process.…”