基于Peach Fuzz的媒体网关安全测试

Security Test of Media Gateway Based on Peach Fuzz

随着互联网技术和计算机技术的发展,软件在各行各业的应用越来越广泛。随之而来的软件安全问题也越来越突出。在常见的软件安全测试工具中,Peach Fuzz是一款优秀的安全测试工具,能在多种操作系统上运行,支持多种协议的模糊测试。结合媒体网关安全测试工作实践,介绍了Peach Fuzz测试的基本结构和特点;介绍了H.248协议和SCTP协议;叙述了媒体网关的测试模型;详细叙述了基于Peach Fuzz的媒体网关安全测试过程,其主要内容包括搭建和部署Peach Fuzz测试执行机、测试执行机对接测试环境、Peach Fuzz测试套的调试和连跑、Peach Fuzz测试的观测方法、测试结果分析。最后介绍了一个测试案例。工作实践表明采用Peach Fuzz工具进行媒体网关安全测试,有助于提高媒体网关产品的安全可靠性,提升产品质量。

With the development of Internet and computer technology,the software is widely applied in all fields of life. Following by,the software security problem is becoming more and more prominent. Among the common software security test tools,Peach Fuzz is an excellent one which can run in multiple operating systems and support fuzzy test for multiple protocols. Combing with the work practice of media gateway security test,we introduce the basic structure and characteristics of the Peach Fuzz test and H.248 protocol and SCTP protocol,and describe the media gateway test model. Especially,we describe the media gateway security test process based on Peach Fuzz in detail,mainly including building and deploying Peach Fuzz test execution machine,test execution machine docking test environment,debugging and running Peach Fuzz test set,Peach Fuzz test observation,and test results analysis. Finally a test case is given. Practice shows that the Peach Fuzz on media gateway security test helps to improve the safety and reliability of the media gateway products and product quality.