Method for extending Peach platform and testing multiple network message fields

Abstract

The invention discloses a method for extending a Peach platform and testing multiple network message fields. The method comprises the following steps: cancelling the limit of original Peach which at most five fields are tested at the same time; presenting the progressive field combined test method, namely testing one field, two fields..., n-1 fields, and n fields at the same time; in allusion to the conflict of large number of test cases and limited test time generated in the combination process, namely the problem of 'combination explosion', permitting the tester to execute the lt in the PitFile; executing the Strategy and gt; setting different levels of test cast generating conditions in the label, effectively limiting the generation numbers, generating the test cast with more pertinency, and greatly improving the test efficiency of protocol safety specialist. For the safety specialist familiar with the Peach platform, the method is simple and effective, and is convenient to operate.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a protocol testing method in the field of network security. Background technique [0002] The problem of network security has attracted people's full attention at present, and protocol robustness testing is an effective measure to ensure the quality of network entities. How to discover potential flaws hidden in network entities with minimum overhead is an important research direction in the field of network security. At present, the research focus of most testing tools and methods is to inject the type and content of attack data into message fields, and only one field can be tested at a time, while the research on the method of testing multiple network message fields at the same time is less. [0003] In the field of network robustness testing, there are many testing tools or platforms, such as Scapi, AppScan, Nessus, Spike, and Peach, etc., but each has slightly different adv...

AI Technical Summary

Problems solved by technology

Among them, Scapi tests the underlying protocol; AppScan scans Web services; Nessus regression tests known vulnerabilities; although Spike has the ability to discover "0-day" vulnerabilities, its code logic is tightly coupled with test data and is not easy to expand; Peach is Currently the most active community in the field of protocol testing, many researchers use their results to enhance the original functions of Peach

[0004] Although Peach's Random strategy supports the function of testing multiple message fields at the same time, there are several deficiencies: 1) At most 5 message fields can be tested at the same time; 3) An infinite number of test cases are generated, and the test cases may be repeated. The test process is not only not systematic enough, but must be terminated manually

The above defects lead to the fact that when security experts conduct multi-field tests based on Peach, they not only have certain limitations, but also have strong blindness, and the test efficiency is relatively low.

Images