Test method, device, computer equipment and storage medium for vehicle CAN bus

Abstract

The application proposes a test method, device, computer equipment and storage medium for a vehicle CAN bus, wherein the method includes: obtaining a target message sample from a test sample set; performing mutation processing on the target message sample to generate a target abnormal test report text; send the target abnormal test message to the target device, and receive the target response message corresponding to the target abnormal test message fed back by the target device; if the target response message is not included in the historical response message set, based on different dimensions Perform data analysis on the target response message, and input the target response message into the test sample set according to the data analysis result. Therefore, by obtaining samples covering new functions from the response message and storing them in the test sample set, each time during the fuzz testing process, the test samples are obtained from the test sample set to mutate the vehicle CAN bus to fuzz the test, increasing the vehicle CAN bus. The coverage rate of the bus fuzz test improves the efficiency of vehicle CAN bus fuzz test vulnerability mining.

Description

technical field [0001] The present application relates to the technical field of vehicle safety, in particular to a test method, device, computer equipment and storage medium of a vehicle CAN bus. Background technique [0002] Fuzz testing is an effective software vulnerability mining method applied in the Internet, and increasing test coverage is the most important means to improve the efficiency of fuzz testing. [0003] In related technologies, the method of sample execution path feedback is mainly used to increase the test coverage rate. There are two main ways to implement the existing execution path feedback technology: one is to monitor through code instrumentation, such as Google's clang compiler, It can automatically insert probe code to monitor code coverage when code is compiled, and pintool (dynamic binary instrumentation tool) can insert code in real time to monitor code execution coverage when binary code is executed; the other is to monitor through virtual exe...

AI Technical Summary

Problems solved by technology

However, the programs in the vehicle CAN bus usually cannot run in the pintool or qemu environment, nor can they be re-compiled by the clang compiler and then loaded into the electronic control unit to run. The traditional execution path feedback technology through code instrumentation is no longer suitable for CAN. bus fuzzing

Images