Automated fuzz testing method, related equipment, and computer-readable storage medium

Abstract

The embodiment of the invention discloses an automatic fuzz testing method, related equipment, and a computer-readable storage medium. The method includes: first obtaining the code to be detected and the testing tool, and then searching for compiled objects that have a dependency relationship with the code to be detected according to the code to be detected, generating a dependency list, and after obtaining the dependency list, the code to be detected and all compiled objects in the dependency list The data codes of the objects together form the target code, and the test tool is used to compile the target code, and the compiled target code is used for fuzz testing. The embodiment of the present invention automatically generates a dependency list and automatically compiles the target code through the code to be tested, which can improve the performance of fuzz testing. s efficiency.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to an automatic fuzz testing method, related equipment, and a computer-readable storage medium. Background technique [0002] In fuzzing, you attack a program with random bad data, and wait to see what gets broken. The trick with fuzzing is that it's illogical: instead of guessing which data will break (as a human tester would), an automated fuzzer throws as much messy data as possible into the program. The failure mode verified by this test is usually a complete shock to the programmer, because no one who thinks logically would have thought of this kind of failure. Fuzzing is a simple technique, but it can reveal important bugs in a program. It identifies real-world error patterns and alerts you to potential attack avenues that should be blocked before your software ships. [0003] At present, the work of fuzz testing is being carried out both at home and abroad. Fuzz ...

AI Technical Summary

Problems solved by technology

[0003] At present, the work of fuzz testing is being carried out both at home and abroad. Fuzz testing can be divided into manual fuzz testing and automated tool testing. Manual fuzz testing refers to penetration testing modified by security personnel through experience. Smart, but its disadvantage is that it cannot find vulnerabilities thoroughly, and requires the participation of experienced test engineers; automated tool testing is through tool testing based on the fuzzy testing framework. This method has high testing efficiency, but the disadvantage is that the false positive rate is relatively high , requiring a small amount of human intervention

Images