基于状态驱动的Linux内核漏洞可用性搜索方法及系统
By constructing a three-layer feedback mechanism and state variable instrumentation, the problem of fuzzing methods being unable to focus on vulnerabilities in the Linux kernel is solved, achieving comprehensive vulnerability exploration and reducing false positives.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Chinese People's Liberation Army Cyberspace Force Information Engineering University
- Filing Date
- 2023-03-30
- Publication Date
- 2026-07-17
AI Technical Summary
Existing fuzzing methods struggle to focus their efforts on Linux kernel vulnerabilities, failing to fully explore their exploitability and leading to misjudgments and insufficient vulnerability discovery.
By extracting key objects and state variables from kernel vulnerability data, a three-layer feedback mechanism is constructed, consisting of coverage feedback, kernel key object feedback, and kernel state feedback. Using state variables as input, fuzzing instrumentation is performed to guide fuzzing to search for vulnerability-related code segments and explore different paths and states.
It effectively improves the efficiency and ability of fuzz testing in discovering different erroneous behaviors of vulnerabilities, ensuring that energy is concentrated near the current vulnerability, comprehensively exploring the exploitability of the vulnerability, and reducing false positives.
Smart Images
Figure CN116451236B_ABST