Automatic vulnerability mining method and system capable of automatically adjusting load

Abstract

The invention discloses an automatic vulnerability mining method and system capable of self-adjusting load, and the method comprises the steps: firstly packaging a vulnerability mining environment, a target program and a test tool into a mirror image, uploading the mirror image to a virtualization platform, uploading a test case to a test case warehouse, and generating a test case queue; starting a specified initial number of virtual machines as working nodes through the virtualization platform, starting a host process by a test tool on the working nodes, starting and managing a plurality of working processes by the host process, and executing vulnerability mining test work by the working processes; the test tool carries out self-adjustment on the load of the working node according to the computing resource occupation condition of the working node until saturation is achieved; and after all the working nodes run stably, the number of the working nodes is automatically adjusted according to the consumption speed of the test case and the test plan time limitation, so that the test work can be completed within the plan time. According to the method, the test load can be automatically optimized, and the utilization rate of computing resources and the vulnerability mining efficiency are improved.

Description

technical field [0001] The invention relates to an automatic loophole mining method and system based on cloud computing self-adjusting load, belonging to the fields of automatic testing and computer software. Background technique [0002] Fuzz test vulnerability mining technology is an automated testing technology, which generates a large number of semi-effective test cases as the input of the target program through random algorithms, monitors the abnormalities of the target program, and finds possible security vulnerabilities in the target program. [0003] Such as figure 1 As shown, a typical fuzz test vulnerability mining process is as follows: 1. Generate test case files through a specific random algorithm. For the target program, the file has a valid necessary identifier and can be used as a valid input of the target program, but the content of the file is invalid, which may cause an exception during the processing of the target program. 2. Open the test case file wit...

AI Technical Summary

Problems solved by technology

[0004] At present, the problems existing in the fuzzing test vulnerability mining are: 1. The process of testing with a large number of test cases is time-consuming and inefficient

2. Existing technical solutions cannot make full use of the hardware resources used for testing

3. The degree of automation of existing technical solutions is not high enough, requiring a lot of manual intervention

Images