摘要
为有效产生程序测试数据,提高Fuzzing测试数据的生成效率和测试覆盖率的问题,提出了一种新的Fuzzing测试数据生成算法——H-Fuzzing。其主要思想是通过程序静态分析结果和动态运行属性,收集程序关键分支谓词的相关信息,得到其与输入变量之间的关联关系,进而指导测试数据算法的收缩,达到能够在少量的随机输入产生过程中得到较高的测试覆盖率的目的。
To solve the problem of efficiently reducing the fuzzing data scale with the assurance of high fuzzing veracity and vulnerability coverage,a new heuristic fuzzing data generation method is presented,named as H-Fuzzing.H-Fuzzing has high test efficiency and program executing path coverage.H-Fuzzing supervises the reduction of fuzzing data aggregation by collecting the information of key branch predications and building its relations with the input variables from the static analysis and dynamic property of the program.
出处
《计算机工程与设计》
CSCD
北大核心
2010年第13期3010-3013,3050,共5页
Computer Engineering and Design