摘要
基于覆盖引导的模糊测试技术是当前研究的热点,AFL是该领域的代表性工具。文章在AFL基础上进行了改进,将Havoc的变异策略建模为一个多臂赌博机问题,并提出一种结合ε-greedy算法和置信区间上界(Upper Confidence Bound,UCB)算法的动态调整变异策略的方法,实现了工具EnAFL的设计。通过与AFL的对比实验分析得出,EnAFL在代码覆盖率和测试效率方面表现更出色。
Fuzzy testing technology based on coverage guidance is currently a hot research topic,and AFL is a representative tool in this field.The article improves on AFL by modeling Havoc’s mutation strategy as a multi arm gambling machine problem,and proposes a dynamic adjustment mutation strategy method that combines the ε-greedy algorithm and the Upper Confidence Bound(UCB)algorithm,achieving the design of the tool EnAFL.Through comparative experimental analysis with AFL,it is found that EnAFL performs better in terms of code coverage and testing efficiency.
作者
季王鑫
黄润智
JI Wangxin;HUANG Runzhi(School of Information and Control Engineering,Jilin Institute of Chemical Technology,Jilin Jilin 132022,China)
出处
《信息与电脑》
2023年第22期75-78,共4页
Information & Computer
关键词
模糊测试
变异策略
目标优化
漏洞挖掘
fuzzing
mutation strategy
objective optimization
vulnerability mining