一种漏洞检测方法、装置、设备及存储介质、程序产品
By parsing request and response data from program execution data and performing multi-dimensional mutation processing, the problem of insufficient quality of mutated data in fuzz testing is solved, thereby improving the detection rate of vulnerabilities.
CN116974887BActive Publication Date: 2026-07-17TENCENT TECHNOLOGY (SHENZHEN) CO LTD
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- TENCENT TECHNOLOGY (SHENZHEN) CO LTD
- Filing Date
- 2022-04-22
- Publication Date
- 2026-07-17
AI Technical Summary
Technical Problem
In existing technologies, the quality of mutated data during fuzzing is poor, resulting in a low detection rate for vulnerabilities.
Method used
By parsing request and response data from the program execution data of the program to be tested, integrating them into seed data, and performing mutation processing, high-quality mutated data is generated by using data from multiple dimensions as seeds for mutation.
Benefits of technology
The quality of the variant data was improved, thereby increasing the detection rate of vulnerabilities.
✦ Generated by Eureka AI based on patent content.
Smart Images
Figure CN116974887B_ABST
Abstract
本申请提供了一种漏洞检测方法、装置、设备及存储介质、程序产品；本申请实施例可以应用于云技术、人工智能、智慧交通、车载等的漏洞检测场景中，涉及软件测试技术；该方法包括：获取待检测程序的程序运行时刻，以及待检测程序的依赖数据；对程序运行数据进行解析处理，得到请求数据和响应数据；针对请求数据、响应数据和依赖数据进行整合处理，得到种子数据，并对种子数据进行变异，得到变异数据；将变异数据输入待检测程序，并记录待检测程序针对变异数据的处理状态；通过对变异数据和处理状态进行解析，生成表征待检测程序是否存在漏洞的漏洞检测结果。通过本申请，能够提高漏洞检测的检出率。
Need to check novelty before this filing date? Find Prior Art