A method and system for fuzzing testing of virtual devices in cloud computing systems

A virtual device and fuzz testing technology, applied in computing, transmission systems, computer security devices, etc., can solve the problems of low test efficiency and high threshold, and achieve the effect of effective and rapid implementation and loss reduction.

CN110348216BActive Publication Date: 2021-04-06INST OF INFORMATION ENG CHINESE ACAD OF SCI
11 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Publication Date
2021-04-06

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention relates to a fuzzy testing method and system for virtual equipment of a cloud computing system. The method includes: sensing the code of the target virtual device, and automatically generating a test case; inserting the Qtest execution engine of QEMU of the target virtual device, obtaining the initialization sequence of the PCI bus, and realizing that the operating system or system snapshot is not started, Effectively and quickly realize the initialization of the device state; construct the fuzz test execution engine, directly read the test data, realize the automatic replay of the test case, and improve the efficiency of the fuzz test; monitor the QEMU process, and minimize the process reduction through the test case if an exception occurs Test cases, and automatically generate POC program code to verify the abnormalities found. The invention can effectively detect the security loopholes of the cloud platform developed based on KVM / QEMU, thereby helping service providers to timely defend or eliminate potential threats and avoid or reduce unnecessary losses.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention relates to the field of computer system security, and is used for detecting security loopholes in virtual devices of cloud computing systems, more specifically, a fuzzy testing method and system for virtual devices of cloud computing systems. Background technique

[0002] With the continuous growth of the global cloud computing market share, as the basis of cloud computing, virtualization technology has been widely used. At the same time, it inevitably brings many security problems, and malicious behaviors using virtualization platform vulnerabilities to attack emerge in endlessly. As an important part of the virtualization platform, the virtual device is one of the main sources of security threats to the virtualization platform. Utilizing the vulnerabilities of virtual devices can launch escape attacks or denial-of-service attacks in the target cloud computing system, thereby affecting the normal and safe operation of the cloud computing...

Examples

Embodiment Construction

[0036] In order to enable those skilled in the art to better understand the technical solutions in the present invention, and to make the purpose, features and advantages of the present invention more obvious and understandable, the technical core of the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments illustrate.

[0037] In this embodiment, an effective, large-scale, target-aware fuzzing system is designed, which can effectively solve the problems existing in the prior art.

[0038] Such as figure 1 As shown in , it is a schematic diagram of the fuzzing system architecture of the virtual device of the cloud computing system. The test framework mainly consists of five functional modules, including test case generation module, virtual device initialization module, virtual device test module, test case minimization module and test coverage information real-time display module. The testing process is main...