张光华, 石晓朦. 面向应用层协议的自动化模糊测试方案[J]. 微电子学与计算机, 2018, 35(3): 99-103.
引用本文: 张光华, 石晓朦. 面向应用层协议的自动化模糊测试方案[J]. 微电子学与计算机, 2018, 35(3): 99-103.
ZHANG Guang-hua, SHI Xiao-meng. An Automated Fuzzy Test Scheme for Application Layer Protocol[J]. Microelectronics & Computer, 2018, 35(3): 99-103.
Citation: ZHANG Guang-hua, SHI Xiao-meng. An Automated Fuzzy Test Scheme for Application Layer Protocol[J]. Microelectronics & Computer, 2018, 35(3): 99-103.

面向应用层协议的自动化模糊测试方案

An Automated Fuzzy Test Scheme for Application Layer Protocol

  • 摘要: 为了解决应用层网络协议模糊测试方案存在的自动化程度较低的问题, 提出了一种基于网络协议逆向工程技术的应用层协议模糊测试方案.将逆向工程技术与模糊测试技术相结合, 采用LCS算法和多序列比对算法逆向分析应用层网络协议特征, 自动构造模糊测试所需协议格式, 根据得出的协议格式生成所需测试用例, 完成模糊测试.实验结果表明, 方案降低了对人工分析协议规范的依赖, 并根据协议分析得出的结果可以有效挖掘协议漏洞, 具有一定的可靠性.

     

    Abstract: In order to solve the problem of low degree of automation in the application layer network protocol fuzz testing, an application layer protocol fuzzy testing based on network protocol reverse engineering technology is proposed. In this paper, the LCS algorithm and the multi-sequence alignment algorithm are used to analyze the characteristics of the application layer network protocol, and the protocol format of the fuzz testing is automatically constructed. The required test cases are generated according to the protocol format. The experimental results show that the scheme reduces the dependence on the specification of the manual analysis protocol, and the result of the protocol analysis can effectively exploit the protocol loopholes and have some reliability.

     

/

返回文章
返回