Operating system kernel fuzzy test seed evaluation and distribution method

Abstract

The invention discloses an operating system kernel fuzz test seed evaluation scheduling method. The method comprises the steps that firstly, a fuzz test tool reads an initial corpus to obtain a test case used for kernel fuzz test; the operating system executes the test case; judging whether the test case crashes or not in the execution process; judging whether the test case covers the kernel position which is not covered by the seeds in the ready seed pool or not in the execution process; judging whether the fuzzy test tool receives a test end instruction or not; selecting a next test case seed according to the optimized seed evaluation strategy and the energy distribution strategy, and distributing corresponding energy for mutation operation; and repeating the steps and outputting the crash seed pool maintained and updated in the current test process. According to the method, the seed priority evaluation strategy and the energy distribution strategy are optimized, and the probability that the seeds access the low-frequency path is improved, so that the time for exposing vulnerabilities on the low-frequency path is shortened, and the kernel fuzzy test efficiency is greatly improved.

Description

technical field [0001] The invention belongs to the field of software testing, in particular to a method for evaluating and distributing seeds for fuzzy testing of operating system kernels. Background technique [0002] The operating system manages and controls the hardware and software resources of the entire computer system, and reasonably organizes and allocates computer work and resource allocation. The kernel is the most important part of the operating system, which can provide the upper-layer application software with safe access to computer hardware resources. Therefore, the security of the kernel has always been a hot research topic in the security field. At present, the security detection of the operating system kernel is generally to detect its defects, so as to ensure the security and stability of the kernel. [0003] Fuzzing is a security testing technology, mainly used to detect security vulnerabilities. Its core idea is to input random data generated automati...

AI Technical Summary

Problems solved by technology

At present, no effective method has been proposed to solve the above problems

[0005] At the same time, the existing kernel fuzzing methods do not take into account the difference in the frequency of different execution paths, that is, some paths will be accessed frequently, while some difficult-to-reach paths are visited too infrequently because only a few seeds can access them.

Therefore, the test process of fuzz testing is limited to the relatively easy-to-cover kernel position, and effective coverage on paths with low coverage frequencies cannot be achieved, making it difficult to find kernel defects on paths with low test coverage frequencies.

Images