Semi-valid Fuzz Testing Case Generation for Stateful Network Protocol

查看全文 作　　者：Rui [1]Ma;Shuaimin [1]Ren;Ke [2]Ma;Changzhen [1]Hu;Jingfeng [1]Xue

机构地区：[1]the Beiiing Key Laboratory of Software Security Engineering Technology,School of Software,Beijing Institute of Technology,Bering 100081,China;[2]the Internet Center,Institute of Communication Standard Research.China Academy of Information and Communication Technology,Bering 100191,China

出　　处：《Tsinghua Science and Technology》索引2017年第22卷第5期,共11页

基　　金：supported by the National Key R&D Program of China(No.2016YFB0800700) 摘　　要：Network protocols are divided into stateless and stateful.Stateful network protocols have complex communication interactions and state transitions.However,the existing network protocol fuzzing does not support state transitions very well.This paper focuses on this issue and proposes the Semi-valid Fuzzing for the Stateful Network Protocol(SFSNP).The SFSNP analyzes protocol interactions and builds an extended finite state machine with a path marker for the network protocol; then it obtains test sequences of the extended finite state machine,and further performs the mutation operation using the semi-valid algorithm for each state transition in the test sequences; finally,it obtains fuzzing sequences.Moreover,because different test sequences may have the same state transitions,the SFSNP uses the state transition marking algorithm to reduce redundant test cases.By using the stateful rule tree of the protocol,the SFSNP extracts the constraints in the protocol specifications to construct semi-valid fuzz testing cases within the sub-protocol domain,and finally forms fuzzing sequences.Experimental results indicate that the SFSNP is reasonably effective at reducing the quantity of generated test cases and improving the quality of fuzz testing cases.The SFSNP can reduce redundancy and shorten testing time. 关键词：测试用例生成网络协议状态转换模糊测试扩展有限状态机测试序列有效算法变异操作

相关文献

参考文献（22）
引证文献（7）
耦合文献（94）

参考文献(22)

引证文献(7)

耦合文献(94)

互联网出版许可证新出网证(渝)字10号全国400电话 - 免长途话费

Semi-valid Fuzz Testing Case Generation for Stateful Network Protocol

参考文献(22)

引证文献(7)

耦合文献(94)

用户提示