A method and device for fuzz testing

Abstract

The invention discloses a fuzzy test method. The method comprises the following steps: obtaining a type of a detected object test inlet; determining a type of test data corresponding to the detected object test inlet from established corresponding relations between the test data and types of test inlets; and injecting the test data of the corresponding type to the detected object test inlet, and performing a fuzzy test on a detected object. According to the fuzzy test method provided by the embodiment of the invention, the type of the test data corresponding to the detected object test inlet is determined from the established corresponding relations between the test data and the types of the test inlets, the test data of the corresponding type is injected to the detected object test inlet, and the fuzzy test is carried out on the detected object, such that the fuzzy test is performed relevantly, and the relevancy and the test efficiency of the test are improved.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a method and device for fuzz testing. Background technique [0002] Fuzz testing (referred to as "fuzzing") is a method of discovering software vulnerabilities by providing unexpected inputs to the target system and monitoring abnormal results. Its core idea is to automatically or semi-automatically generate random data input into a program, and monitor program exceptions, such as crashes, assertion failures, log exceptions, etc., to find possible program errors. [0003] Existing fuzz testing technology uses massive data for testing each time, resulting in poor pertinence during testing and low testing efficiency. Contents of the invention [0004] In order to solve the problem of poor pertinence and low test efficiency in fuzz testing in the prior art, the embodiment of the present invention provides a method of fuzz testing, which can use the established corresponding rel...

AI Technical Summary

Problems solved by technology

[0004] In order to solve the problem of poor pertinence and low test efficiency in fuzz testing in the prior art, the embodiment of the present invention provides a method of fuzz testing, which can use the established corresponding relationship between test data and test entry types to carry out targeted testing. Fuzzy testing, which improves the pertinence and efficiency of testing

Images