A control system for improving fuzzy testing efficiency

Abstract

The present invention provides a control system for improving fuzzy testing efficiency, and relates to the field of computer security. The present invention includes a network communication protocol module, device hardware, a device operation system and an operation page, wherein the network communication protocol module is electrically connected to a fuzzy testing system, the fuzzy testing system includes a packet sender, a monitor, a mutator, a converter and a corrector, the fuzzy testing system is electrically connected to a control system, when an abnormality determination module judges that there is a potential safety hazard, the control system module will control the fuzzy testing system to work, change the way in which the fuzzy testing system detects all data, and reduce the waste of computing power, the output end of the monitor is electrically connected to a vulnerability locking module, the vulnerability locking module locks the security vulnerabilities of the device operation system according to the security problems that occur in the device operation system in the simulation, and the security protection module electrically connected to the device operation system works to encrypt and protect the data corresponding to the security vulnerabilities to avoid data leakage and damage.

Description

Technical Field

[0001] The invention relates to a control system, in particular to a control system for improving fuzzy testing efficiency, and belongs to the technical field of computer security. Background Art

[0002] As the complexity of software and hardware systems continues to increase, the number and types of security vulnerabilities are also increasing. Many people think that the development stage is the important link, but in fact, without effective quality control of large-scale software and hardware, it is impossible to truly build and maintain large-scale systems. Any error in the system may cause the collapse of the entire system, causing irreparable losses, and any minor modification to the system may introduce new defects, causing maintenance difficulties.

[0003] In order to improve the security and stability of software and hardware systems, security testing tools have emerged. As a commonly used security testing tool, fuzz testing tools (Wisdom) have become an indispensable part of the security testing field.

[0004] A large amount of unexpected fuzz test data is automatically or semi-automatically constructed by the fuzzer and sent to the target test application, and the anomalies are monitored to discover possible vulnerabilities. Therefore, fuzz testing is widely used to detect security vulnerabilities in software or computer systems because it can detect faults that are ignored in software implementation. Nowadays, fuzz testing methods have been widely used in network application security testing tools. Network application fuzz testing tools use pre-compiled and complete fuzz test cases stored in the security testing tool system to test network security. In other words, the fuzz test cases used to test network application security in the security testing tool are fixed, and operations such as adding, deleting and modifying fuzz test cases in the system cannot be flexibly performed. It can only be used when the fuzz test cases that are already available in the security testing tool are used for network security testing. Summary of the invention

[0005] To solve the above problems, the present invention is implemented through the following technical solutions: a control system for improving fuzzy testing efficiency, including a network communication protocol module, device hardware, a device operation system and an operation page, the network communication protocol module is electrically connected to a fuzzy testing system, the fuzzy testing system includes a packet sender, a monitor, a mutator, a converter and a corrector, and the fuzzy testing system is electrically connected to a control system;

[0006] The control system includes a protocol correction module, an abnormal traffic judgment module, a data recording module, an abnormal determination module, an execution recording module, a seed data collection module, a vulnerability simulation module, a vulnerability locking module and a result simulation module.

[0007] Preferably, the network communication protocol module includes security & encryption protocol, network protocol, routing protocol, network application layer protocol, link layer protocol and wireless protocol, and the device hardware and operation page output are electrically connected to the device operation system and the packet sender.

[0008] Preferably, the output end of the packet transmitter is electrically connected to a monitor, the output end of the monitor is electrically connected to a mutator, the output end of the mutator is electrically connected to a converter, and the output end of the converter is electrically connected to a corrector.

[0009] Preferably, the monitor is electrically connected to the equipment operation system, the output end of the monitor is electrically connected to the abnormality judgment module and the vulnerability locking module, the output end of the vulnerability locking module is electrically connected to the converter and the result simulation module, the output end of the vulnerability locking module is electrically connected to the security prompt module, the output end of the security prompt module is electrically connected to the operation page, the output end of the operation page is electrically connected to the security protection module and the communication module, and the output end of the network communication protocol module is electrically connected to the vulnerability locking module.

[0010] Preferably, the device hardware and operation page output ends are electrically connected to the device operation system, the device operation system output end is electrically connected to the data recording module, and the network communication protocol module output end is electrically connected to the abnormal traffic judgment module and the data recording module.

[0011] Preferably, the output end of the abnormal flow judgment module is electrically connected to the abnormal flow judgment module, the abnormal flow judgment module is electrically connected to the equipment operation system, the output end of the abnormal judgment module is electrically connected to the seed data collection module and the execution recording module, the output end of the execution recording module is electrically connected to the operation page, and the data recording module is electrically connected to the seed data collection module.

[0012] Preferably, the output end of the seed data collection module is electrically connected to the vulnerability simulation module, the vulnerability simulation module is electrically connected to the device operation system and the mutator, and the device operation system is electrically connected to the vulnerability library.

[0013] Preferably, the corrector output end is electrically connected to the protocol correction module, the protocol correction module output end is electrically connected to the result simulation module, and the result simulation module output end is electrically connected to the operation page.

[0014] The present invention provides a control system for improving fuzzy testing efficiency, which has the following beneficial effects:

[0015] 1. The control system for improving the efficiency of fuzzy testing, when the abnormal judgment module determines that there is a security risk, the control system will control the fuzzy testing system to work, change the way the fuzzy testing system detects all data, reduce the waste of computing power, and the monitor monitors the state of the device operation system being attacked by the attack program generated by the vulnerability simulation module in each simulation. When the monitor detects that there is a security problem in the device operation system in the simulation, the output end of the monitor is electrically connected to the vulnerability locking module. The vulnerability locking module locks the security vulnerability of the device operation system according to the security problem of the device operation system in the simulation. At the same time, the security protection module electrically connected to the device operation system works to encrypt and protect the data corresponding to the security vulnerability to avoid data leakage and damage. Through the cooperation of the control system and the control fuzzy testing system, the security vulnerability of the device operation system can be quickly locked according to the abnormal data, thereby improving the efficiency of the control fuzzy testing system test.

[0016] 2. The control system for improving the efficiency of fuzz testing, the seed data collection module intercepts data from the electrically connected data recording module as seed data, the seed data is transmitted by the seed data collection module to the electrically connected vulnerability simulation module at the output end, the vulnerability simulation module simulates and generates an attack program according to the seed data and the computer basic language algorithm, the vulnerability simulation module cooperates with the electrically connected device operation system to simulate the situation where the attack program attacks the device operation system, when the attack program cannot cause harm to the device operation system, the seed data is output by the vulnerability simulation module to the electrically connected mutator, the mutator mutates the seed data to form seed data one, the seed data one is transmitted by the mutator to the electrically connected vulnerability simulation module, the vulnerability simulation module The block simulates and generates attack program one according to seed data one, and the vulnerability simulation module cooperates with the electrically connected device operating system to simulate the situation where the attack program one attacks the device operating system; then, the mutator mutates the seed data to form seed data two, and the seed data two is transmitted to the electrically connected vulnerability simulation module by the mutator, and the vulnerability simulation module simulates and generates attack program two according to seed data two, and the vulnerability simulation module cooperates with the electrically connected device operating system to simulate the situation where the attack program two attacks the device operating system; the mutator, the vulnerability simulation module and the device operating system perform the above work in a loop until the mutator cannot mutate the seed data into new seed data according to the computer basic language algorithm, and the vulnerability simulation module cannot simulate and generate a new attack program.

[0017] 3. The control system for improving the efficiency of fuzzy testing, when the abnormal traffic judgment module and the abnormal judgment module judge that there is abnormal data in the new data received by the equipment operation system, but there is no impact on the operation of the equipment operation system, the execution recording module electrically connected to the abnormal judgment module records the execution command, and when the staff turns off the equipment, the operation page electrically connected to the output end of the execution recording module pops up a page to remind the user that there is abnormal data in the equipment, and asks the user whether to perform equipment safety monitoring. When the user chooses to perform equipment safety monitoring, the control system module will control the fuzzy testing system to cooperate, and quickly judge whether there is a security loophole in the equipment operation system based on the abnormal data, and lock the security loophole. The fuzzy test of the abnormal data can be carried out separately, thereby improving the operation quality of the fuzzy testing system. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 is a schematic diagram of a control system of the present invention;

[0019] Figure 2 It is a schematic diagram of the abnormal flow judgment module of the present invention.

[0020] Explanation of the accompanying drawings: 1. Network communication protocol module; 101. Security & encryption protocol; 102. Network protocol; 103. Routing protocol; 104. Network application layer protocol; 105. Link layer protocol; 106. Wireless protocol; 2. Equipment hardware; 3. Operation page; 4. Packetizer; 5. Monitor; 6. Mutator; 7. Converter; 8. Corrector; 9. Protocol correction module; 10. Equipment operation system; 11. Abnormal traffic judgment module; 12. Data recording module; 13. Abnormal judgment module; 14. Execution recording module; 15. Seed data collection module; 16. Vulnerability simulation module; 17. Vulnerability locking module; 18. Security prompt module; 19. Vulnerability library; 20. Security protection module; 21. Communication module; 22. Result simulation module. DETAILED DESCRIPTION

[0021] An embodiment of the present invention provides a control system for improving fuzzy testing efficiency.

[0022] See also Figure 1 and Figure 2 , including a network communication protocol module 1, device hardware 2, a device operation system 10 and an operation page 3, the network communication protocol module 1 is electrically connected to a fuzzy test system, the fuzzy test system includes a packet sender 4, a monitor 5, a mutator 6, a converter 7 and a corrector 8, and the fuzzy test system is electrically connected to a control system;

[0023] The control system includes a protocol correction module 9, an abnormal traffic judgment module 11, a data recording module 12, an abnormal determination module 13, an execution recording module 14, a seed data collection module 15, a vulnerability simulation module 16, a vulnerability locking module 17 and a result simulation module 22.

[0024] Specifically,

[0025] As a core component of modern computer systems, network communication involves the interaction of multiple protocols to achieve data transmission and system functions. In addition to adapting to modern computer network communication systems composed of multiple protocols interacting with each other, the fuzzy testing system can also adapt to network communication protocol module 1, which is composed of security & encryption protocol 101, network protocol 102, routing protocol 103, network application layer protocol 104, link layer protocol 105 and wireless protocol 106. The network communication protocol module 1 can also adapt to the protocols that users can define to fit the application according to their needs. The security encryption protocols in the security & encryption protocol 101 are divided into multimedia-related protocols, service management protocols, and medical-related protocols, including DICOM, OAM, CFM, MMS, etc., which are used to ensure the security of communication and encryption of data, and play a key role in protecting sensitive information and privacy; network protocol 102 includes A RP, ICMP series, TCP series, DHCP series, etc. are responsible for reliable data transmission, routing and packet switching in network communications; routing protocols 103 include RIP series, MPLS, BGP, ISIS, OSPF series, etc., which are used to build and maintain network routing tables and support the correct forwarding of data packets in the network; network application layer protocols 104 include ICAP, TELNET, AMQP, HTTP, SNMP, FTP, etc., which are widely used on the Internet and affect user experience and data transmission; link layer protocols 105 include SNAP, LLC, LACP, etc., which are responsible for transmitting data frames on physical links and are crucial for the connection between LANs and wireless networks; wireless protocols 106 are divided into wireless protocols and bus protocols, including GTP, USB, WIFI, Bluetooth protocols, etc., which are used for mobile communications, LANs, data transmission, etc.

[0026] Since the output ends of the network communication protocol module 1, the device hardware 2 and the operation page 3 are all electrically connected to the device operation system 10 and the packet sender 4, and the output end of the packet sender 4 is electrically connected to the monitor 5, the data input into the device operation system 10 through the network communication protocol module 1, the computer network communication system, the device hardware 2 and the operation page 3 are synchronously transmitted to the packet sender 4. The packet sender 4 can modify the process of packet sending and receiving through the front-end configuration, support customization of various protocols, data formats and packet structures, adapt to the communication methods of different target systems, and meet the operation needs of the device operation system 10. It is important that, since the output end of the packet sender 4 is electrically connected to the monitor 5, the monitor 5 monitors the operating status and response of the equipment operation system 10 in real time, and records the key information during the test. The monitor 5 provides a variety of monitoring modes, including performance monitoring, anomaly detection, etc., to meet the needs of different test scenarios; the output end of the monitor 5 is electrically connected to the mutator 6, the output end of the mutator 6 is electrically connected to the converter 7, and the output end of the converter 7 is electrically connected to the corrector 8. Each time the equipment operation system 10 receives new data, the monitor 5, the mutator 6, the converter 7 and the corrector 8 all enter the standby state.

[0027] Every time the device operation system 10 receives new data, it is stored and backed up in the data recording module 12. The monitor 5 monitors the operation of the device operation system 10. The monitor 5 monitors whether the internal data of the device operation system 10 is illegally tampered with by the new data. The violation results monitored by the monitor 5 are transmitted by the monitor 5 to the abnormal judgment module 13 electrically connected to the output end; at the same time, when external data enters the device operation system 10 through the network communication protocol module 1, since the output end of the network communication protocol module 1 is electrically connected to the abnormal flow judgment module 11 and the data recording module 12, the external data is transmitted to the abnormal flow judgment module 11. At the same time, the abnormal flow judgment module 11 monitors the changes in the flow consumption of the electrically connected device operation system 10. The abnormal flow judgment module 11 transmits the detected flow change parameters to the abnormal judgment module 13 electrically connected to the output end. The abnormal judgment module 13 determines whether there is a safety hazard in the data based on the violation results and the flow change parameters.

[0028] When the abnormality determination module 13 judges that there is a safety hazard, the control system module will control the fuzzy test system to work, change the way the fuzzy test system detects all data, and reduce the waste of computing power. At this time, the seed data collection module 15 electrically connected to the output end of the abnormality determination module 13 works. The seed data collection module 15 intercepts data from the electrically connected data recording module 12 as seed data. The seed data is transmitted by the seed data collection module 15 to the vulnerability simulation module 16 electrically connected to the output end. The vulnerability simulation module 16 generates an attack program based on the seed data and the computer basic language algorithm. The vulnerability simulation module 16 is electrically connected to the data recording module 12. When the device operation system 10 cooperates with the simulated attack program to attack the device operation system 10, and the attack program cannot cause harm to the device operation system 10, the seed data is output by the vulnerability simulation module 16 to the electrically connected mutator 6, and the mutator 6 mutates the seed data to form seed data 1, and the seed data 1 is transmitted to the electrically connected vulnerability simulation module 16 by the mutator 6. The vulnerability simulation module 16 simulates and generates an attack program 1 according to the seed data 1, and the vulnerability simulation module 16 cooperates with the electrically connected device operation system 10 to simulate the attack program 1 attacking the device operation system 10; then, the mutator 6 mutates the seed data to form a seed data According to the second, the seed data two is transmitted to the electrically connected vulnerability simulation module 16 by the mutator 6, the vulnerability simulation module 16 simulates and generates the attack program two according to the seed data two, and the vulnerability simulation module 16 cooperates with the electrically connected device operation system 10 to simulate the situation that the attack program two attacks the device operation system 10; the mutator 6, the vulnerability simulation module 16 and the device operation system 10 cyclically perform the above work until the mutator 6 cannot mutate the seed data into new seed data according to the computer basic language algorithm, and the vulnerability simulation module 16 cannot simulate and generate a new attack program; at the same time, the monitor 5 monitors the device operation system 10 in each simulation. 6 generates an attack program attack status. When the monitor 5 detects a security problem in the device operating system 10 in the simulation, the output end of the monitor 5 is electrically connected to a vulnerability locking module 17. The vulnerability locking module 17 locks the security vulnerability of the device operating system 10 according to the security problem in the device operating system 10 in the simulation. At the same time, the security protection module 20 electrically connected to the device operating system 10 works to encrypt and protect the data corresponding to the security vulnerability to avoid data leakage and damage. By cooperating with the control system and the control fuzzy test system, the security vulnerability of the device operating system 10 can be quickly locked according to the abnormal data, thereby improving the test efficiency of the control fuzzy test system.

[0029] And the equipment operation system 10 is electrically connected to the vulnerability library 19, and the security vulnerabilities in the equipment operation system 10 are transmitted to the vulnerability library 19 for storage. When the abnormal traffic judgment module 11 and the abnormal judgment module 13 judge that there is abnormal data in the new data received by the equipment operation system 10, but it does not affect the operation of the equipment operation system 10, the execution recording module 14 electrically connected to the abnormal judgment module 13 records the execution command. When the staff turns off the equipment, the operation page 3 electrically connected to the output end of the execution recording module 14 pops up a page to remind the user that there is abnormal data in the equipment, and asks the user whether to perform equipment safety monitoring. When the user chooses to perform equipment safety monitoring, the control system module will control the fuzzy test system to cooperate, and quickly judge whether there is a security vulnerability in the equipment operation system 10 according to the abnormal data, and lock the security vulnerability. The fuzzy test of the abnormal data can be carried out separately to improve the operation quality of the fuzzy test system.

[0030] After the vulnerability locking module 17 locks the security vulnerability of the device operation system 10 security system, the converter 7 electrically connected to the transmission end of the vulnerability locking module 17 starts working. The converter 7 converts the data of the protocol element with the security vulnerability into the data format required by the protocol to generate correction data. The converter 7 transmits the correction data to the electrically connected corrector 8. The corrector 8 generates protocol supplementary data according to the correction data. The corrector 8 transmits the protocol supplementary data to the protocol correction module 9 electrically connected to the transmission end. The protocol correction module 9 substitutes the protocol supplementary data into the pre-written calculation model stored in the device operation system 10. The calculation model modifies and supplements the protocol with the security vulnerability according to the protocol supplementary data to form a supplementary protocol. The output end of the protocol correction module 9 is connected to the result. The simulation module 22 is electrically connected, and the supplementary protocol is transmitted to the result simulation module 22 by the protocol correction module 9. The result simulation module 22 simulates the influence of the supplementary protocol on the device operation system 10 and generates reference data 1. At the same time, the vulnerability locking module 17 transmits the security vulnerability data to the result simulation module 22 electrically connected at the transmission end. The result simulation module 22 simulates the influence that the security vulnerability may have on the device operation system 10 and generates reference data 2. The reference data 1 and the reference data 2 are transmitted to the operation page 3 electrically connected at the output end by the result simulation module 22. The operation page 3 displays the reference data 1 and the reference data 2 to remind the user whether to choose to use the supplementary protocol instead of the original security protocol, so as to ensure the safety of the user's equipment while giving the user sufficient autonomy.

[0031] After the vulnerability locking module 17 locks the security vulnerability, the security prompt module 18 electrically connected to the output end of the vulnerability locking module 17 starts to work, and the security prompt module 18 controls the operation page 3 electrically connected to the output end to work and pop up an inquiry interface. After the user selects device virus removal on the inquiry interface, the security protection module 20 electrically connected to the output end of the operation page 3 starts to work, and the security protection module 20 performs virus removal on the device and encrypts important files for protection.

[0032] After the control system model and the fuzzy test system work together to lock the security vulnerability, the security protocol where the security vulnerability exists and the location of the security vulnerability are copied by the device operation system 10 and transmitted to the vulnerability library 19 for storage and backup. The operation page 3 electrically connected to the vulnerability library 19 pops up a feedback inquiry interface, asking the user whether to send the simulation process of the control system and the fuzzy test system working together to lock the vulnerability to the equipment manufacturer through the communication module 21.

Claims

1. A control system for improving fuzzy testing efficiency, comprising a network communication protocol module (1), device hardware (2), a device operating system (10) and an operation page (3), characterized in that: The network communication protocol module (1) is electrically connected to a fuzzy test system, the fuzzy test system comprises a packet sender (4), a monitor (5), a mutator (6), a converter (7) and a corrector (8), and the fuzzy test system is electrically connected to a control system; The control system comprises a protocol correction module (9), an abnormal flow determination module (11), a data recording module (12), an abnormal determination module (13), an execution recording module (14), a seed data collection module (15), a vulnerability simulation module (16), a vulnerability locking module (17) and a result simulation module (22); The output end of the abnormal flow judgment module (11) is electrically connected to the abnormal flow judgment module (13), the abnormal flow judgment module (11) is electrically connected to the equipment operation system (10), the output end of the abnormal judgment module (13) is electrically connected to the seed data collection module (15) and the execution recording module (14), the output end of the execution recording module (14) is electrically connected to the operation page (3), and the data recording module (12) is electrically connected to the seed data collection module (15); The output end of the seed data collection module (15) is electrically connected to the vulnerability simulation module (16), the vulnerability simulation module (16) is electrically connected to the device operation system (10) and the mutator (6), and the device operation system (10) is electrically connected to the vulnerability library (19); The monitor (5) is electrically connected to the equipment operation system (10); the output end of the monitor (5) is electrically connected to the abnormality determination module (13) and the vulnerability locking module (17); the output end of the vulnerability locking module (17) is electrically connected to the converter (7) and the result simulation module (22); the output end of the vulnerability locking module (17) is electrically connected to the safety prompt module (18); the output end of the safety prompt module (18) is electrically connected to the operation page (3); the output end of the operation page (3) is electrically connected to the safety protection module (20) and the communication module (21); the output end of the network communication protocol module (1) is electrically connected to the vulnerability locking module (17); All new data received by the device operation system (10) enters the data recording module (12) for internal storage and backup, and the monitor (5) monitors whether the data in the device operation system (10) is illegally tampered with by the new data, and the violation results monitored by the monitor (5) are transmitted by the monitor (5) to the inside of the abnormality determination module (13); when external data enters the device operation system (10) through the network communication protocol module (1), the abnormal flow determination module (11) monitors the changes in the flow consumption of the device operation system (10), and the abnormal flow determination module (11) transmits the detected flow change parameters to the inside of the abnormality determination module (13), and the abnormality determination module (13) determines whether the data has security risks based on the violation results and the flow change parameters; When the abnormality determination module (13) determines that there is a safety hazard, the control system controls the fuzzy test system to work, and the seed data collection module (15) electrically connected to the output end of the abnormality determination module (13) works. The seed data collection module (15) intercepts data from the inside of the data recording module (12) as seed data. The seed data is transmitted by the seed data collection module (15) to the inside of the vulnerability simulation module (16). The vulnerability simulation module (16) simulates and generates an attack program based on the seed data and a computer basic language algorithm. The vulnerability simulation module (16) cooperates with the device operation system (10) to simulate the situation where the attack program attacks the device operation system (10). When the attack program cannot cause harm to the device operation system (10), the seed data is output by the vulnerability simulation module (16) to the inside of the mutator (6). The mutator (6) mutates the seed data to form seed data one. The seed data one is input by the mutator (6). The seed data is sent to a vulnerability simulation module (16), the vulnerability simulation module (16) simulates and generates an attack program one according to the seed data one, and the vulnerability simulation module (16) cooperates with the device operation system (10) to simulate the situation in which the attack program one attacks the device operation system (10); the mutator (6), the vulnerability simulation module (16) and the device operation system (10) perform the above-mentioned work in a loop until the mutator (6) is unable to mutate the seed data into new seed data according to the computer basic language algorithm, and the vulnerability simulation module (16) is unable to simulate and generate a new attack program; the monitor (5) monitors the state of the device operation system (10) being attacked by the attack program generated by the vulnerability simulation module (16) in each simulation, and when the monitor (5) detects that a security problem occurs in the device operation system (10) in the simulation, the vulnerability locking module (17) locks the security vulnerability of the device operation system (10) according to the security problem that occurs in the device operation system (10) in the simulation.

2. A control system for improving fuzzy testing efficiency according to claim 1, characterized in that: The network communication protocol module (1) includes a security and encryption protocol (101), a network protocol (102), a routing protocol (103), a network application layer protocol (104), a link layer protocol (105) and a wireless protocol (106), and the output ends of the device hardware (2) and the operation page (3) are both electrically connected to the device operation system (10) and the packet sender (4).

3. A control system for improving fuzzy testing efficiency according to claim 1, characterized in that: The output end of the packet transmitter (4) is electrically connected to the monitor (5), the output end of the monitor (5) is electrically connected to the mutator (6), the output end of the mutator (6) is electrically connected to the converter (7), and the output end of the converter (7) is electrically connected to the corrector (8).

4. A control system for improving fuzzy testing efficiency according to claim 1, characterized in that: The output ends of the device hardware (2) and the operation page (3) are both electrically connected to the device operation system (10), the output end of the device operation system (10) is electrically connected to the data recording module (12), and the output end of the network communication protocol module (1) is electrically connected to the abnormal flow judgment module (11) and the data recording module (12).

5. A control system for improving fuzzy testing efficiency according to claim 1, characterized in that: The output end of the corrector (8) is electrically connected to the protocol correction module (9), the output end of the protocol correction module (9) is electrically connected to the result simulation module (22), and the output end of the result simulation module (22) is electrically connected to the operation page (3).

Images