利用构造类别代数的协议安全测试方法

Constructed Type Algebra Based Protocol Security Testing Method

针对协议安全测试中数据流的描述问题,在构造类别代数的基础上引入变异分析,由此提出了一种协议安全测试方法.基于协议的描述设计了变异算子,然后对一致性公式集进行变异分析,从而得到安全变异项集.将变异项转换为实际的安全测试例集,并描述由此进行的协议安全测试步骤.测试实践表明,所提方法能与一致性测试良好地结合,在一定程度上覆盖已知安全漏洞,并具有发现潜在问题的能力.

Considering the data flow description in protocol security testing, mutation analysis is introduced based on constructed type algebra, and a new protocol security testing method is proposed. Mutant operators are designed based on protocol specification, security mutation formulas are generated from existing conformance testing expressions, and then practical security testing cases are transformed from these formulas. The steps of protocol security testing using the method are described. The method is well integrated with conformance testing to cover some known protocol security vulnerabilities, and has the ability to reveal potential problems.