期刊文献+

程序脆弱性发现中的测试数据生成方法研究

Research of heuristic fuzzing data generation method in program frangibility
下载PDF
导出
摘要 为有效产生程序测试数据,提高Fuzzing测试数据的生成效率和测试覆盖率的问题,提出了一种新的Fuzzing测试数据生成算法——H-Fuzzing。其主要思想是通过程序静态分析结果和动态运行属性,收集程序关键分支谓词的相关信息,得到其与输入变量之间的关联关系,进而指导测试数据算法的收缩,达到能够在少量的随机输入产生过程中得到较高的测试覆盖率的目的。 To solve the problem of efficiently reducing the fuzzing data scale with the assurance of high fuzzing veracity and vulnerability coverage,a new heuristic fuzzing data generation method is presented,named as H-Fuzzing.H-Fuzzing has high test efficiency and program executing path coverage.H-Fuzzing supervises the reduction of fuzzing data aggregation by collecting the information of key branch predications and building its relations with the input variables from the static analysis and dynamic property of the program.
出处 《计算机工程与设计》 CSCD 北大核心 2010年第13期3010-3013,3050,共5页 Computer Engineering and Design
关键词 脆弱性分析 FUZZING测试 静态分析 动态分析 控制流图 frangibility analysis fuzzing test static analysis dynamic analysis control flow graph
  • 相关文献

参考文献9

  • 1Fuzz utility[EB/OL].ftp://grilled.cs.wisc.edu/fuzz.
  • 2Csallner C,Smaragdakis Y.JCrasher:an automatic robustness tester for Java[J].Software:Practice and Experience,2004,34(11):1025-1050.
  • 3Pacheco C,Ernst M D.Eclat:Automatic generation and classification of test inputs[C].Glasgow,Scotland:19th European Conference Object-Oriented Programming,2005:504-527.
  • 4Visser W,Pasareanu C S,Khurshid S.Test input gnneration with Java Path Finder[C].Proc ACM SIGSOFT International Symposium on Software Testing and Analysis,2004:97-107.
  • 5Beyer D,Chlipala A J,Henzinger T A,et al.Generating test from counterexamples[C].Proc of the 26th ICSE,2004:326-335.
  • 6Xie T,Marinov D,Schulte W,et al.Symstra:A framework for generating object-oriented unit tests using symbolic execution[C].Edinburgh,UK:Proc of TACAS,2005:365-381.
  • 7Majumdar R,Xu R.Directed test generation using symbolic grammars[C].The 6th Joint Meeting on European Software Engineering Conference and the ACM SIGSOFT Symposium on the Foundations of Software Engineering,2007:553-556.
  • 8Godefroid P,Kiezun A,Levin M.Grammar-based Whitebox Fuzzing[J].ACM SIGPLAN Notices,2008,43(6):206-215.
  • 9Majumdar R,Sen K.Hybrid concolic testing[C].Washington,DC,USA:29th International Conference on Software Engineering.IEEE Computer Society,2007:416-426.

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部