A Fuzzing Framework for the Security Evaluation of NDEF Message Format

In the very near future, the vast majority of mobile phones will be NFC-enabled. The NFC technology, other than adding extra features to mobile devices, adds a new way for attackers to break into these. To be sure that attackers will go after this technology, it is enough to think that the killer feature foreseen for this technology it will be the possibility for the user to pay on the fly with his phone, by simply putting the smartphone in close proximity to the payment device. The aim of this paper is to draw the attention to one aspect related to the security of NFC devices, the NFC Data Exchange Format (NDEF). In this paper will be introduced techniques for testing NDEF, as well as to propose a new solution for fuzz testing NDEF on smart phones.