一种基于遗传算法的Fuzzing测试用例生成新方法

A Novel Method for Fuzzing Test Cases Generating Based on Genetic Algorithm

本文根据传统漏洞挖掘Fuzzing技术的特点,针对其存在的不能求解非线性解和只能有单个的输入的问题,提出了一种基于遗传算法的漏洞挖掘测试用例生成的新方法.该方法能够利用遗传算法的优势,同时可以应对多输入测试用例问题和非线性求解问题.从自测程序的结果看出,相比于传统随机生成Fuzzing测试用例的方法,本方案在效率和覆盖率方面具有明显的提高.

Considering the features of the traditional Fuzzing technology,a method is proposed for Fuzzing test case generating in vulnerability exploiting,which is aim ed at nonlinear solution and single input problem. This m ethod takes advantage of the genetic algorithm and deals with those two problem s m entioned above. The experim ent results showthat,the proposed solution has an obvious im provem ent com pared with the early m ethod which generates the test cases random-ly.