| 基于改进轮盘赌策略的反馈式模糊测试方法 |
| |
| 引用本文： | 蔡军,邹鹏,沈弼龙,何骏. 基于改进轮盘赌策略的反馈式模糊测试方法[J]. 四川大学学报(工程科学版), 2016, 48(2): 132-138 |
| |
| 作者姓名： | 蔡军 邹鹏 沈弼龙 何骏 |
| |
| 作者单位： | 装备学院 复杂电子系统仿真实验室 |
| |
| 基金项目： | 国家863计划资助项目“漏洞挖掘新技术研究”（2012AA012902）；“核高基”国家科技重大专项基金资助项目“安全可靠软硬件集成应用攻关”(2013ZX01045-004) |
| |
| 摘 要： | 针对随机模糊测试方法测试盲目效率低下的问题，提出一种反馈式模糊测试方法，目的是通过流程优化来提高测试效果。首先，通过网络爬虫收集原始样本文件，确保原始样本的多样性。其次，通过代码覆盖率分析来从大量样本文件中筛选用于变异的最佳种子文件，在保证足够的测试空间的同时避免冗余测试。接下来通过变异种子文件的部分比特来生成测试用例，并根据测试结果基于改进轮盘赌策略不断调优种子文件的变异范围，以期发现尽可能多的软件故障。实现了一个原型系统OSSRWSFuzzer，在实验中发现了国产软件WPS Office的56个故障，体现了较强的漏洞检测能力。
|
| 关 键 词： | 软件漏洞检测；反馈式模糊测试；轮盘赌选择 |
| 收稿时间： | 2015-10-15 |
| 修稿时间： | 2016-03-30 |
Feedback Fuzzing Based on Improved Roulette Wheel Selection Strategy |
| |
| CAI Jun,ZOU Peng,SHENG Bilong and HE Jun. Feedback Fuzzing Based on Improved Roulette Wheel Selection Strategy[J]. Journal of Sichuan University (Engineering Science Edition), 2016, 48(2): 132-138 |
| |
| Authors: | CAI Jun ZOU Peng SHENG Bilong HE Jun |
| |
| Abstract: | Aiming to solve the problem of blindness and poor efficiency of random fuzzing, a feedback fuzzing method was proposed, with the purpose of improving test effect through process optimization. Firstly, original sample files were collected via a web crawler to ensure the diversity of them. Secondly, the best seed file was selected from a large number of sample files, to avoid redundant testing while ensuring adequate testing space. Next, test cases were generated by mutating some bits of the seed file, and the mutation range was continuously adjusted according to the testing result based on improved roulette wheel selection strategy, in order to find as many software failures as possible. A prototype system named OSSRWSFuzzer was implemented, which had found 56 failures of the domestic software WPS Office in experiments, reflecting its strong vulnerability detection capability. |
| |
| Keywords: | software vulnerability detection feedback fuzzing roulette wheel selection |
|
| 点击此处可从《四川大学学报(工程科学版)》浏览原始摘要信息 |
|
点击此处可从《四川大学学报(工程科学版)》下载全文 |
