Unlock instant, AI-driven research and patent intelligence for your innovation.

Fuzzy test automatic vulnerability positioning method

A technology of fuzzy testing and positioning methods, which is applied in software testing/debugging, error detection/correction, instruments, etc. It can solve the problems of large manual positioning components, low testing efficiency, and difficult application, so as to save manpower and save vulnerability positioning Time, the effect of reducing the difficulty of application

Active Publication Date: 2019-12-31
信联科技(南京)有限公司
View PDF3 Cites 4 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] To sum up, existing fuzz testing products often rely on manual experience or program-assisted methods to locate vulnerabilities in the testing process. The manual positioning component is relatively large, and there is no automatic positioning based on program algorithms. It is time-consuming and laborious, and the positioning is not accurate or even impossible, resulting in difficult application and low test efficiency

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Fuzzy test automatic vulnerability positioning method
  • Fuzzy test automatic vulnerability positioning method
  • Fuzzy test automatic vulnerability positioning method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0026] The specific implementation manners of the present invention will be further described in detail below in conjunction with the accompanying drawings.

[0027] The present invention designs a fuzzy testing automation loophole positioning method, which is used to search for test cases that cause loopholes in the tested equipment. In practical applications, based on figure 1 shown, press figure 2 Process planning, specifically perform the following steps A to F.

[0028] Step A. For all sorted N test cases, according to the preset detection interval length d, the preset nth 1 From test cases to Nth test cases, they are sequentially divided into detection intervals, that is, the number A of detection intervals is equal to Then initialize a=1, and enter step B; where, 1≤n 1 ≤N.

[0029] Step B. Apply the fuzzy testing platform, send the mutated message of each test case in the a-th detection interval to the device under test for testing, and then enter step C.

[0030...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention relates to a fuzzy test automatic vulnerability positioning method. The fuzzy test automatic vulnerability positioning method adopts brand new automation logic architecture, does not need manual intervention, and can efficiently position a test case triggering a vulnerability while conducting the test, wherein in the testing process, if the vulnerability occurs in the tested equipment, the current testing progress is saved, and automatic rollback is conducted, and a design algorithm is used for replaying a variation message till it is detected that the tested equipment does not respond to the vulnerability, and the vulnerability occurs, so that the vulnerability positioning time can be saved, and the test efficiency is improved, and the manpower is saved, and the cost is reduced; and meanwhile, multi-task concurrence can be achieved, and batch testing and continuous testing are facilitated, and the application difficulty is reduced, and popularization is facilitated.

Description

technical field [0001] The invention relates to a method for locating automatic loopholes in fuzzy testing, which belongs to the technical field of fuzzy testing. Background technique [0002] While enjoying the progress, efficiency and benefits brought by open and interconnected technologies, industrial automation control systems and IoT systems are also facing increasingly serious security threats. In response to these security threats, fuzz testing tools have emerged at the historic moment, which are used to dig out unknown vulnerabilities of devices and verify known vulnerabilities. The fuzz testing tool adopts the serial mode of test-detection-test. By creating test tasks, different test scripts are created for different functional subclasses of the protocol, and then the fields that need to be mutated in the functional subclasses of the protocol are injected and structured. Mutation, flooding attacks, etc., and then generate thousands of test cases, and then send muta...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F11/36G06F21/57
CPCG06F11/3684G06F21/577
Inventor 郭涛李明柱史双龙
Owner 信联科技(南京)有限公司