摘要
分析军用报文格式及其软件特点,给出一种智能强制性Fuzzing测试的畸形数据构造方法。根据Fuzzing技术的原理,设计军用报文软件漏洞发掘系统MTSFuzzer,并对其构架、模块以及关键技术进行描述。测试结果表明,MTSFuzzer能提高军用报文软件漏洞的发掘效率,并且具有较好的可扩展性。
In view of military message structure and characteristics of its software,an intelligent brute Fuzzing test approach for construction of abnormality data is proposed.According to the principles and ideas of Fuzzing,military message software security vulnerability discovery system named MTSFuzzer is developed.Meanwhile,software architecture,modules and key techniques are analyzed.Test result shows that MTSFuzzer improves the efficiency of military message software vulnerability exploiting,and it has good expansibility.
出处
《计算机工程》
CAS
CSCD
2012年第18期61-64,共4页
Computer Engineering
基金
院校科研基金资助项目(2011XYJJ-073)
关键词
FUZZING技术
军用报文软件
漏洞发掘
系统构架
畸形数据
Fuzzing technique； military message software； vulnerability exploiting； system architecture； abnormality data
