State-aware Internet of Things trusted execution environment fuzzy testing method and system

Abstract

The invention discloses a state-aware internet of things trusted execution environment fuzzy testing method and system, and belongs to the field of internet of things trusted execution environment testing. The method comprises the following steps: constructing an Internet of Things trusted execution environment test sample template with a dependency relationship based on document analysis and program analysis; performing a fuzzy test on an original seed queue obtained from the trusted application execution log of the Internet of Things, and collecting feedback information such as a return value, a coverage rate and a global variable value during operation; constructing a trusted execution environment state machine based on a model learning algorithm, optimizing a test sample conforming to the state machine, and storing the test sample in a seed file; according to feedback information and a state machine, distributing and updating selection probabilities for different seeds; and selecting seeds according to the selection probability for fuzzy testing, and dynamically optimizing the state machine by using feedback information. According to the fuzzy testing method and system based on state perception, high-efficiency, deep-level and state perception testing can be carried out on the trusted execution environment of the Internet of Things.

Description

technical field [0001] The invention relates to the field of Internet of Things trusted execution environment testing, in particular to a state-aware Internet of Things trusted execution environment fuzzy testing method and system. Background technique [0002] With the continuous enrichment of the Internet of Things and the continuous development of the industry, in order to protect the security of the Internet of Things devices, relevant manufacturers have proposed a variety of Trust Execution Environment (TEE) implementation solutions, such as QSEE proposed by Qualcomm, MesaTEE proposed by Baidu, LinkTEE proposed by Ali has been widely used in mobile payment, fingerprint recognition, multi-level authorization and other scenarios. [0003] Considering the diversity and closed-source nature of IoT trusted execution environments, researchers design a fuzzing method for trusted user programs in trusted execution environments. However, there is no efficient automated analysis...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the low efficiency and shallow mining level of the current fuzzing testing tools for the Internet of Things trusted execution environment, the present invention provides a state-aware Internet of Things trusted execution environment fuzzing testing method and system

Images