基于控制流序位比对的智能Fuzzing测试方法

doi:10.3969/j.issn.1000-436x.2013.04.013

Abstract

Abstract:

Flowing the way introduced in the research of evolutionary fuzzing system (EFS),a smart fuzzing method was proposed based on the node comparison algorithm among control flow sequences.Through mapping program execution flow sequences onto the control flow sequences,the isomorphism relationship between dada search space and program logic space was established.The analyzed results prove that the method is capa of mining a mass of information from group data effectively,and is able to fully util ze the parallelism of genetic algorithm to guide the fuzzing test.

Key words: smart Fuzzing, control flow, gene algorithm, vulnerability

Ying WANG,Yi-xian YANG,Xin-xin NIU,Li-ze GU. Smart Fuzzing method based on comparison algorithm of control flow sequences[J]. Journal on Communications, 2013, 34(4): 114-121.

Figures/Tables 12

References 12

[1]	CHOI Y H , KIM H C , LEE D H . Tag-aware text file testing for security of a software system[A]. Procedings of International Conference on Convergence Information Technology[C]. I E Press, 2007. 2254-2259.
[2]	LIU Q X , ZHANG Y Q . TFTP vulnerability finding techniq based on fuzzing[J]. Computer Communications. Elsevier, 2008,31(14): 3420-3426.
[3]	姚洪波, 尹亮, 文伟平．基于FUZZING测试技术的Windows内核安全漏洞挖掘方法研究及应用[J]．信息网络安全, 2011,(12):9-16. YAO H B , YIN L , WEN W P . Based on the FUZZING lead to new mining method based on windows kernel vulnerability[J]. Netinfo Security, 2011,(12):9-16.
[4]	GODEFROID P , KLARLUND N , SEN K . DART:directed automated random testing[A]. Proce of the 2005 ACM SIGPLAN Conference on Programming Language Design and Implementation[C]. 2005. 40-6.
[5]	FROID P G , EVIN L M Y D , et al. Automated whitebox fuzz testing[A]. Procof Network and Distributed Systems Security(NDSS)[C]. 2008. 151-166.
[6]	WANG T L , WEI T , GU G F , et al. TaintScope:a Checksum-aware directed fuzzing tool for automatic software vulnerabi ity detection[A]. The 31st IEEE Symposium on Security and Privacy[C]. Berkeley,California,USA, 2010.
[7]	DEMOTT J , ENBODY R , PUNCH B . Revolutionizing the field of grey-box attack surface testing with evolutionary Fuzzing[EB/OL]. , 2012.
[8]	COELLO C A , LAMONT G B , VELDHUIZEN A V . Evolutionary Algorithms for Solving Multi-Objective Problems[M]. New York: Springer-Verlag, 2007.
[9]	SPARKS S , EMBLETON S , et al. Automated vulnerability analysis:leveraging control flow for evolutionary input crafting[A]. Proc of Computer Security Applications Conference[C]. 2007. 477-486.
[10]	DALLMEIER V , KNOPP N , MALLON C , et al. Automatically generating test cases for specification mining[J]. IEEE Transactions on Software Engineering, 2012,38(2): 243-257.
[11]	KANG M G , MCCAMANT S , POOSANKAM P , et al. DTA++:dynamic taint analysis with targeted control-?ow propagation[A]. Network and Distributed Systems Security(NDSS)[C]. 2011.
[12]	NEEDLEMAN S B , WUNSCH C D . A general method applicable to the search for similarities in the amino acid sequence of two proteins[J]. Journal of Molecular Biology, 1970,48(3): 443-453.

Metrics

Recommended 0

No Suggested Reading articles found!

[1]	Ming TANG, Yifan HU. Load-to-store: exploit the time leakage of store buffer transient window [J]. Journal on Communications, 2023, 44(4): 64-77.
[2]	Haiyan KANG, Molan LONG. Research on network attack analysis method based on attack graph of absorbing Markov chain [J]. Journal on Communications, 2023, 44(2): 122-135.
[3]	Yuntao ZHANG, Binxing FANG, Chunlai DU, Zhongru WANG, Zhijian CUI, Shouyou SONG. Container escape detection method based on heterogeneous observation chain [J]. Journal on Communications, 2023, 44(1): 49-63.
[4]	Huafeng HUANG, Purui SU, Yi YANG, Xiangkun JIA. Automatic exploitation generation method of write-what-where vulnerability [J]. Journal on Communications, 2022, 43(1): 83-95.
[5]	Jiawei QIN, Hua ZHANG, Hanbing YAN, Nengqiang HE, Tengfei TU. Research on context-aware Android application vulnerability detection [J]. Journal on Communications, 2021, 42(11): 13-27.
[6]	Changqing AN, Yujia LIU, Hui WANG, Zhiyan ZHENG, Tao YU, Jilong WANG. Research on the invulnerability of regional network based on topology analysis [J]. Journal on Communications, 2021, 42(11): 145-158.
[7]	Bing ZHANG, Zheng WEN, Yuxuan ZHAO, Ning WANG, Jiadong REN. Dual-granularity lightweight model for vulnerability code slicing method assessment [J]. Journal on Communications, 2021, 42(11): 233-241.
[8]	Chunfu JIA,Shengbo YAN,Zhi WANG,Chenlu WU,Hang LI. Method to improve edge coverage in fuzzing [J]. Journal on Communications, 2019, 40(11): 76-85.
[9]	Hongyu SUN,Yuan HE,Jice WANG,Ying DONG,Lipeng ZHU,He WANG,Yuqing ZHANG. Application of artificial intelligence technology in the field of security vulnerability [J]. Journal on Communications, 2018, 39(8): 1-17.
[10]	Cheng-yu SUN,Mao-xing SHEN,Hao SHENG,Jin-ke XIAO. Optimization design of structure invulnerability for air defense multiple sensor network [J]. Journal on Communications, 2017, 38(6): 118-126.
[11]	De-guang LE,Sheng-rong GONG,Shao-gang WU,Feng XU,Wen-sheng LIU. Research on RTF array overflow vulnerability detection [J]. Journal on Communications, 2017, 38(5): 96-107.
[12]	Zi-wei YE,Yuan-bo GUO,Chen-dong WANG,An-kang JU. Survey on application of attack graph technology [J]. Journal on Communications, 2017, 38(11): 121-132.
[13]	Xin JIN,Liang YANG,Cheng-ming JIN,Guo-hua SU,Lei SUN. Method to create and optimize original electric power communication network based on K-means [J]. Journal on Communications, 2016, 37(Z1): 10-14.
[14]	Zhou LI,Cong TANG,Jian-bin HU,Zhong CHEN. Vulnerabilities scoring approach for cloud SaaS [J]. Journal on Communications, 2016, 37(8): 157-166.
[15]	Tao WEN,Yu-qing ZHANG,Qi-xu LIU,Gang YANG. UVDA:design and implementation of automation fusion framework of heterogeneous security vulnerability database [J]. Journal on Communications, 2015, 36(10): 235-244.

Smart Fuzzing method based on comparison algorithm of control flow sequences

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 12

References 12

Related Articles 15

Metrics

Recommended 0