Controlled mutation-based fuzzy test coverage improvement method

Abstract

The invention relates to a controlled mutation-based test case generation method for improving fuzzy test coverage, and belongs to the field of loophole mining in information safety. Aiming at the problem that the existing fuzzy test coverage optimization methods are high in time cost, incomplete in test range and low in automation degree, the invention discloses a controlled mutation-based test case generation method. According to the method, feedback is carried out on test case generation processes by utilizing an instrumentation technology, and a random mutation manner and a controlled mutation manner are combined to optimize the test case generation. Experimental results show that when being compared with the un-optimized test methods, the method has the advantages of improving the code coverage by 35-47% and decreasing the number of test cases required under same code coverage by more than 48%. The method is not only capable of improving the test case coverage and decreasing the test case redundancy, but also has the characteristics of being low in time cost, complete in test range and free of manual intervention in test processes.

Description

Technical field [0001] The invention relates to a test case control mutation generation method for improving the coverage rate of fuzzy testing, and belongs to the field of information security vulnerability mining. Background technique [0002] In recent years, with the development of computer networks, the concept of informatization has been well known by people, and network information is ubiquitous. The application of network information technology in the national economy and national defense construction has become more and more extensive. Therefore, the bearer network The security of information software becomes particularly important. However, as software systems are becoming larger and more complex, their functions are becoming increasingly complex, coupled with the lack of security knowledge of software practitioners, and the security flaws of the programming language itself, leading to endless software security vulnerabilities. In our lives, we often hear reports that ...

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to propose a method for controlling variation to generate test cases for the current method of optimizing fuzzy test coverage with high time cost, incomplete test scope and low degree of automation, using a simple and efficient control variation method to increase code Coverage, without a lot of analysis and calculation, and on the premise of ensuring code coverage, the automation of the overall solution is realized

Images