A browser fuzzing method based on ast mutation

Abstract

The present invention relates to a browser fuzzing test method based on AST mutation. By parsing the verification test sample of the loopholes in the old version of the browser into an AST syntax tree, the AST syntax mutation is performed to obtain a new AST syntax tree, which is re-parsed and generated. New verification test sample, the browser loads the new verification test sample, monitors the operation of the browser with a debugger, if the browser crashes, collects the verification test sample at the time of the crash, uploads it to the WEB server, deletes Runtime validation test sample, otherwise ok, delete runtime validation test sample. The present invention can mutate the original verification test samples, regenerate new verification test samples, let the browser run, monitor the state of the browser, and collect verification test samples that cause the browser to crash, which can greatly improve browsing performance. Improve the efficiency of device fuzz testing and improve the efficiency of vulnerability mining.

Description

technical field [0001] The invention relates to the technical field of error prevention through software testing or debugging, in particular to a browser fuzzing testing method based on AST mutation which improves the efficiency of loophole mining. Background technique [0002] Fuzzing is a method of discovering software vulnerabilities by providing unexpected input to the target system and monitoring abnormal results, that is, using automated or semi-automated methods to repeatedly provide input to applications. [0003] Fuzzers for fuzz testing are divided into two categories, one is mutation-based fuzzers, which are created by mutating existing data samples, and the other is based on generating A (generation-based) fuzzer models the protocol or file format used by the system under test, generates inputs based on the model, and creates test cases accordingly. [0004] In the prior art, the fuzzing test of the browser is mostly carried out on the DOM tree or the Javascript...

AI Technical Summary

Problems solved by technology

[0005] The technical problem solved by the present invention is that in the prior art, the current browsers have repaired the loopholes detected by fuzzing and have implemented some protection mechanisms at the browser level, so that the current single fuzzing method is relatively difficult to fuzz. Test browser vulnerabilities, and even if there are vulnerabilities, it may take a month or more to find out the problem of fuzzing, and then provide an optimized browser fuzzing method based on AST mutation