A browser fuzzy test method based on AST mutation

Abstract

The invention relates to a browser fuzzy test method based on AST mutation. By parsing a validation test sample of vulnerabilities in older browsers into an AST syntax tree, new AST syntax tree is obtained after AST syntax mutation, and by reparsing to generate new validation test samples, the browser loads the new validation test samples to monitor the browser's running. If the browser crashes, the validation test samples at the crash time are collected and uploaded to the WEB server, and the validation test samples at the run time are deleted. Otherwise, the validation test samples at the run time are deleted. The method of the invention can mutate the original verifiability test sample, regenerate the new verifiability test sample, let the browser run, monitor the state of the browser,collect the verifiability test sample that causes the browser to collapse, thereby greatly improving the efficiency of the browser fuzzy test and the efficiency of the vulnerability mining.

Description

technical field [0001] The invention relates to the technical field of error prevention through software testing or debugging, in particular to a browser fuzzing testing method based on AST mutation which improves the efficiency of loophole mining. Background technique [0002] Fuzzing is a method of discovering software vulnerabilities by providing unexpected input to the target system and monitoring abnormal results, that is, using automated or semi-automated methods to repeatedly provide input to applications. [0003] Fuzzers for fuzz testing are divided into two categories, one is mutation-based fuzzers, which are created by mutating existing data samples, and the other is based on generating A (generation-based) fuzzer models the protocol or file format used by the system under test, generates inputs based on the model, and creates test cases accordingly. [0004] In the prior art, the fuzzing test of the browser is mostly carried out on the DOM tree or the Javascript...

AI Technical Summary

Problems solved by technology

[0005] The technical problem solved by the present invention is that in the prior art, the current browsers have repaired the loopholes detected by fuzzing and have implemented some protection mechanisms at the browser level, so that the current single fuzzing method is relatively difficult to fuzz. Test browser vulnerabilities, and even if there are vulnerabilities, it may take a month or more to find out the problem of fuzzing, and then provide an optimized browser fuzzing method based on AST mutation