Multisource-to-multi-target approaching testing method performed based on parallel symbols

A technology of approximation testing and symbolic execution, which is applied in the field of multi-source and multi-target approaching testing based on parallel symbolic execution, can solve the problems of low test efficiency, achieve high-efficiency software security parallel scheduling tests, improve efficiency, and solve the effects of blindness

Inactive Publication Date: 2016-05-04
THE PLA INFORMATION ENG UNIV
View PDF3 Cites 4 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] Aiming at the deficiencies in the prior art, the present invention provides a multi-source and multi-objective approach testing method based on parallel symbolic execution, with security-sensitive points as the target, external input as the test starting point, combined with static and dynamic analysis techniques, to achieve multiple to Multi-objective dynamic approximation coverage test solves the problem of low efficiency of existing tests based on parallel symbolic execution, and improves the efficiency of software parallel security testing

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Multisource-to-multi-target approaching testing method performed based on parallel symbols
  • Multisource-to-multi-target approaching testing method performed based on parallel symbols
  • Multisource-to-multi-target approaching testing method performed based on parallel symbols

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0044] Embodiment one, see figure 1 As shown in , a multi-source and multi-target approach testing method based on parallel symbolic execution includes the following steps:

[0045] Step 1. Translate and transform the program under test by using an intermediate language oriented to safety analysis, and locate the source node of the input function and the sink node of the dangerous function;

[0046] Step 2. Utilize the IDA plug-in to generate the control flow graph and function call graph of the program under test, analyze the set of call paths from the source node to the sink node, and establish a multi-source to multi-target mapping relationship between the source node and the sink node;

[0047] Step 3. Calculate the out-degree of the source node and the in-degree of the sink node, and calculate the test priority of the source and sink node pair, sort the test priority, select the source node with a larger out-degree as the test starting point, and compare the selected sour...

Embodiment 2

[0049] Embodiment two, see Figure 1~3 As shown in , a multi-source and multi-target approach testing method based on parallel symbolic execution includes the following steps:

[0050] Step 1. Translate and transform the program under test by using an intermediate language oriented to safety analysis, and locate the source node of the input function and the sink node of the dangerous function;

[0051] Step 2. Use the IDA plug-in to generate the control flow graph and function call graph of the program under test, analyze the call path set from the source node to the sink node, and establish a multi-source to multi-target mapping relationship between the source node and the sink node, specifically including As follows:

[0052] Step 2.1, find the path set p from all source nodes to sink nodes on the control flow graph and function call graph;

[0053] Step 2.2, generate a program dependency graph, reduce the path set p, and calculate the path cluster set pf from the source t...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a multisource-to-multi-target approaching testing method performed based on parallel symbols. The multisource-to-multi-target approaching testing method includes the steps that firstly, on the basis of safety-analysis-oriented intermediate language representation, input function source nodes and dangerous function sink nodes are detected and positioned; secondly, a set of calling paths from the source nodes to the sink nodes is analyzed through a program control flow diagram, and mapping relationships from the multi-source source nodes to the multi-target sink nodes are built; thirdly, the out-degree of the source nodes and the in-degree of the sink nodes are calculated according to the node pairs with the mapping relationships; finally, parallel task scheduling is achieved with the out-degree and the in-degree as the priority measurement bases so that multisource-to-multi-target approaching testing can be implemented. By means of the multisource-to-multi-target approaching testing method, the problems of the blindness and the low efficiency of traditional random path scheduling parallel testing are well solved, the key target covering hit rate is greatly increased, and software testing and analyzing efficiency is greatly improved.

Description

technical field [0001] The invention relates to the field of computer software safety parallel testing, in particular to a multi-source and multi-target approach testing method based on parallel symbolic execution. Background technique [0002] The application of symbolic execution technology in the field of software vulnerability analysis has achieved great development. Compared with traditional fuzz testing, it has great advantages in test data generation and program execution path analysis, and improves the ability of vulnerability analysis. However, due to the huge number of software execution paths, the efficiency of path-by-path analysis is low under limited resource conditions, and the test coverage is difficult to improve, which has become a bottleneck in the development of symbolic execution. [0003] With the development of high-performance hardware platforms and new computing models, parallel symbolic execution technology has gradually become a research hotspot at...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F11/36
CPCG06F11/3676G06F11/3688
Inventor 曹琰魏强尹中旭彭建山武泽慧柳晓龙刘雯雯
Owner THE PLA INFORMATION ENG UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products