Unlock instant, AI-driven research and patent intelligence for your innovation.

A Fuzzy Test Automation Vulnerability Locating Method

A technology of fuzzy testing and positioning methods, which is applied in software testing/debugging, error detection/correction, instruments, etc. It can solve the problems of large manual positioning components, low testing efficiency, and difficult application, so as to save manpower and facilitate batch testing and continuous testing, reducing the effect of application difficulty

Active Publication Date: 2022-06-28
信联科技(南京)有限公司
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] To sum up, existing fuzz testing products often rely on manual experience or program-assisted methods to locate vulnerabilities in the testing process. The manual positioning component is relatively large, and there is no automatic positioning based on program algorithms. It is time-consuming and laborious, and the positioning is not accurate or even impossible, resulting in difficult application and low test efficiency

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A Fuzzy Test Automation Vulnerability Locating Method
  • A Fuzzy Test Automation Vulnerability Locating Method
  • A Fuzzy Test Automation Vulnerability Locating Method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0026] The specific embodiments of the present invention will be described in further detail below with reference to the accompanying drawings.

[0027] The present invention designs an automated vulnerability location method for fuzzy testing, which is used to find test cases that make the device under test generate vulnerabilities. In practical applications, based on figure 1 shown, press figure 2 The process planning of , specifically execute the following steps A to F.

[0028] Step A. For all the sorted N test cases, according to the preset detection interval length d, the preset nth 1 The number of test cases to the Nth test case is divided into various detection intervals in sequence, that is, the number A of detection intervals is equal to Then initialize a=1, and enter step B; where, 1≤n 1 ≤N.

[0029] Step B. Apply the fuzzing test platform, and send the variant messages of each test case in the a-th detection interval to the device under test for testing, and ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The present invention relates to a fuzzy testing automation loophole positioning method, which adopts a brand-new automatic logic framework, does not require manual intervention, and can efficiently locate test cases that trigger loopholes while testing, wherein, during the testing process, if the tested If a device has a vulnerability, it will save the current test progress, automatically roll back, and use the designed algorithm to replay the mutated message until it is detected that the device under test does not respond and a vulnerability occurs; this can save time for locating vulnerabilities, improve test efficiency, and save manpower , to reduce costs; at the same time, multi-tasks can be concurrent, which is convenient for batch testing and continuous testing, reduces application difficulty, and is easy to promote.

Description

technical field [0001] The invention relates to a method for locating an automatic vulnerability in a fuzzy test, and belongs to the technical field of a fuzzy test. Background technique [0002] While enjoying the progress, efficiency and benefits brought by open and interconnected technologies, industrial automation control systems and IoT systems also face increasingly serious security threats. In response to these security threats, fuzzing tools have emerged at the historic moment to mine unknown vulnerabilities of devices and verify known vulnerabilities. The fuzzing tool adopts the serial mode of test-probe-test. By creating test tasks, different test scripts are created for different functional subclasses of the protocol, and then error injection and structure are performed on the fields that need to be mutated in the functional subclasses of the protocol. Mutation, flooding attacks, etc., and then generate thousands of test cases, and then send mutation packets to t...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): G06F11/36G06F21/57
CPCG06F11/3684G06F21/577
Inventor 郭涛李明柱史双龙
Owner 信联科技(南京)有限公司