Method for constructing call chain conversion diagram and guiding generation of X.509 certificate variation

Abstract

A method for constructing a call chain conversion diagram and guiding generation of X.509 certificate variation comprises the following steps: constructing a test seed set and inputting a target test program to obtain function call chain information in dynamic execution, and mapping the function call chain information into an initial node in the call chain conversion diagram; and cyclically generating new variant test cases for the sampling nodes in the call chain conversion diagram through variant operators, and correspondingly updating the call chain conversion diagram according to the variant test cases until a target number of test cases are generated. According to the invention, the function call chain information in the test case set generation process is fully utilized, diversified test cases are effectively and quickly generated through the call chain conversion diagram, and therefore the test efficiency is improved.

Description

technical field [0001] The present invention relates to a technology in the field of software testing, specifically a technique for automatically generating variants of X.509 certificates by collecting function call chains during dynamic execution of programs to construct call chain conversion graphs, and for testing openssl and other implementations of SSL / TLS security protocol software. Background technique [0002] As a common software testing method in black box testing, fuzz testing can find potential vulnerabilities by sending unexpected test cases to the test program to observe whether the program is abnormal. Generally, there are two generation methods: one is to generate new test cases through the variant operator of the existing test cases, and the generated new test cases are called variants, which retain most of the data of the original test cases, and only part of the data After the transformation, it is different from the original. The variant operator can b...

AI Technical Summary

Problems solved by technology

The cumulative coverage rate generally indicates the adequacy of the test, that is, the coverage of the statement, function, etc. of the program under test during execution, but it cannot be used to measure the diversity of the execution path of the test set in the target program

If only the sufficiency of the test case set is considered without considering its execution path in the target test program, the test effects for those test cases whose execution paths are consistent in the test program are consistent, which will lead to redundant test cases. More than that, the diversity is not high

Images