基于变异技术的第三方构件安全性测试系统

Design and implementation of third-party component security testing system based on mutation technology

针对基于变异技术的第三方COM(component object model)构件安全性异常的自动检测问题,设计实现了一个第三方构件安全性测试原型系统TCSTS(third-party component security testing system).TCSTS系统的主要功能模块有构件接口分析模块、参数变异测试模块、条件变异测试模块、状态变异测试模块和安全分析模块.构件接口分析模块能分析得到被测试构件的接口方法和参数信息;在参数变异测试模块中,采用参数变异测试用例生成算法生成参数变异值集合进行变异测试;在条件变异测试模块中,生成违背前置条件的测试用例并结合后置条件检测条件语句中是否存在安全漏洞;在状态变异测试模块中,基于行为冲突算法和条件冲突算法变异可扩展有穷状态机以生成冲突序列,进而参照变异前序列进行安全性测试,最终通过安全分析模块生成测试报告.试验结果表明:所设计实现的TCSTS原型系统具有自动化程度高、操作简单以及测试效果较好的特点;TCSTS对异常序列的检测率达到了20%以上,表明TCSTS能够较好地对构件中状态相关的安全漏洞进行检测.

To solve the automatic detection problem of component security exceptions for the third-party component,a prototype tool of third-party component security testing system(TCSTS) was designed and implemented. The TCSTS could employ three aspects of security testing for third-party component of parameter mutation testing,condition mutation testing and state mutation testing. In parameter mutation testing,the variance value was set as parameter constraint by the test case generation algorithm based on the parameter constraint(TCGPC), and the test cases were generated with different parameter constraint. In condition mutation testing,the test cases were generated to satisfy and violate the precondition,and the existence of security vulnerabilities was checked in the condition judgment statement with post-condition. In state mutation testing, executable method sequences of components were transformed into extended finite state machine(EFSM),and operations conflict sequences generated algorithm(OCGA) and conditions conflict sequences generated algorithm(CCGA) were designed tomutate EFSM and generate conflict sequences. The security testing of conflict sequences after mutation was implemented. The results show that the TCSTS has good operational ability and testing ability. The detection rate of abnormal sequence by TCSTS is more than 20%,which indicates that TCSTS can detect the state-related security vulnerabilities in the component security testing.