Fuzzy test method and fuzzy test device for AFDX network protocol

Abstract

The fuzz testing method of the AFDX network protocol is suitable for testing of an airborne network protocol and comprises the steps that S1, configurable parameters in the AFDX protocol serve as input of fuzz testing to generate a testing data packet, and the configurable parameters comprise virtual link configuration, bandwidth configuration, time scheduling configuration and protocol frame field configuration; s2, calling the test data packet to test a network protocol; s3, sending the test data packet to the tested equipment through the AFDX network; s4, obtaining a test result of the tested equipment; and S5, based on the test result, labeling the test case which causes the abnormal scene as an effective test case by using a manual or automatic mode, thereby improving the test efficiency of the network protocol and related software thereof.

Description

Technical Field

[0001] The present invention belongs to the technical field of airborne network information security testing, and in particular relates to a fuzzy testing method and a fuzzy testing device for an AFDX network protocol. Background Art

[0002] AFDX (Aviation Full-Duplex Switched Ethernet) network protocol, also known as Aviation Full-Duplex Switched Ethernet protocol, is a standard protocol for network communication in avionics systems, which is derived from commercial Ethernet technology. It is mainly used for network communication within aircraft as an upgrade of traditional aviation bus (such as ARI NC 429) systems. AFDX has the characteristics of high bandwidth, real-time and reliability, and has the capabilities of flow control, bandwidth management, and redundant design based on virtual links, which can ensure the reliable transmission of key data and is suitable for complex and demanding data exchange tasks in modern avionics systems.

[0003] For the testing of AFDX network protocol, currently Airbus, Boeing and other companies mainly use special tools such as TTTech's AFDX Explorer, D-Space and Wi nd River's simulation and monitoring tools to implement virtual link (VL) configuration, traffic monitoring, performance evaluation, fault injection, etc. of AFDX network. Domestic research started late, and the main testing methods currently used include hardware-in-the-loop (HIL) testing, automated script testing, and verification of bandwidth allocation, real-time performance and fault tolerance mechanisms of virtual links.

[0004] Fuzz testing of AFDX network protocols is still in the exploration and development stage at home and abroad. Foreign countries have begun to combine automated testing technology and use random and non-standard data packets to detect the robustness and exception handling capabilities of the network. At present, China mainly focuses on traditional functional and performance testing, and the application of fuzz testing is relatively limited. However, with the development of domestic large aircraft projects, the domestic aviation industry has continuously increased its security requirements for AFDX networks. The application of fuzz testing in AFDX protocols faces the challenges of insufficient tools and high complexity, which reduces the testing efficiency of network protocols and related software. Summary of the invention

[0005] In view of this, the fuzzy testing method of the AFDX network protocol of the present invention is used to test airborne equipment using the AFDX network protocol, discover security issues when airborne equipment uses the AFDX network protocol to communicate, improve the security and stability of the airborne system, discover potential vulnerabilities in a timely manner, and improve testing efficiency.

[0006] A fuzzy testing method for an AFDX network protocol is suitable for testing an airborne network protocol. The fuzzy testing method comprises the following steps:

[0007] S1: Generate a test data packet using the configurable parameters in the AFDX protocol as input for fuzz testing, wherein the configurable parameters include virtual link configuration, bandwidth configuration, time scheduling configuration, and protocol frame field configuration;

[0008] S2: calling the test data packet to test the network protocol;

[0009] S3: Send the test data packet to the device under test through the AFDX network;

[0010] S4: Obtain the test results of the device under test, wherein the test results include the conditions of network protocol crash, error, abnormal network packet loss, jitter, and delay during use, then record the parameters of the test data packet and the status of the current network and the device under test;

[0011] S5: Based on the test results, the test cases that cause abnormal scenarios are marked as valid test cases in a manual or automated manner, and the marked valid test cases are fed back to step S1 to generate test data packets of the same type.

[0012] Furthermore, the configurable parameters in the AFDX protocol are used as the input of the fuzz test to generate test cases. For example, fuzz tests are performed on the configuration of virtual links, bandwidth configuration, time scheduling configuration, protocol frame field configuration, etc., and the test data packets for fuzz testing are generated using the existing test case generation methods based on generation, mutation, or a combination of the two.

[0013] Calling test data packets for testing, for example, to test the robustness and fault tolerance of the AFDX network in time scheduling, it is necessary to generate test inputs with different time intervals, timestamps, and scheduling cycles, simulate abnormal time triggering modes, and schedule corresponding test data packets for testing;

[0014] Send the test data packet to the device under test through the AFDX network;

[0015] Use existing monitoring, logging or status reporting methods to obtain test results from the device under test. If a crash, error, or abnormal packet loss, jitter, or delay occurs, record the test data packet and the current status of the network and the device under test.

[0016] Based on the test results, test cases that trigger abnormal scenarios are marked as valid test cases using manual or automated methods.

[0017] In a second aspect, a fuzzy testing device for an AFDX network protocol is provided, which may include: a generating unit, a scheduling unit, a sending unit, an acquiring unit, and a feedback unit;

[0018] The generating unit is used to generate test cases from configurable parameters in the AFDX protocol as inputs of fuzz testing;

[0019] The scheduling unit is used to schedule corresponding test data packets for different test purposes for testing;

[0020] The sending unit is used to send the test data packet to the device under test through the AFDX network;

[0021] The acquisition unit is used to acquire test results from the device under test, including data when a crash, error or abnormal packet loss, jitter and delay occurs, as well as the current status of the network and the device under test;

[0022] The feedback unit is used to feed back effective test case data to the test case generation module to generate test data packets of the same type to explore more potential problems.

[0023] In a third aspect, an electronic device is provided, the electronic device comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus;

[0024] Memory, used to store computer programs;

[0025] The processor is used to implement any method step described in the first aspect when executing the program stored in the memory.

[0026] In a fourth aspect, a computer-readable storage medium is provided, wherein a computer program is stored in the computer-readable storage medium, and when the computer program is executed by a processor, any method step described in the first aspect is implemented.

[0027] The technical beneficial effects of the present invention are:

[0028] The configurable parameters in the AFDX protocol are used as the input of the fuzz test to generate test cases, and then the data packets are sent to the device under test through configurable case scheduling. Then, the test results are obtained from the device under test through monitoring, logging or status reporting, and the screened and processed valid cases are fed back to the test case generation module, thereby improving the testing efficiency of network protocols and their related software. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0030] Figure 1 It is a flowchart of the fuzzy testing method of the AFDX network protocol in the embodiment;

[0031] Figure 2 Schematic diagram of the AFDX frame structure in the embodiment;

[0032] Figure 3 Schematic diagram of a fuzzy testing device for the AFDX network protocol in an embodiment. DETAILED DESCRIPTION

[0033] The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

[0034] The following describes the embodiments of the present disclosure through specific examples, and those skilled in the art can easily understand other advantages and effects of the present disclosure from the contents disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all of the embodiments. The present disclosure can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present disclosure. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present disclosure.

[0035] It should be noted that various aspects of the embodiments within the scope of the appended claims are described below. It should be apparent that the aspects described herein can be embodied in a wide variety of forms, and any specific structure and / or function described herein is merely illustrative. Based on the present disclosure, it should be understood by those skilled in the art that an aspect described herein can be implemented independently of any other aspect, and two or more of these aspects can be combined in various ways. For example, any number of aspects described herein can be used to implement the device and / or practice the method. In addition, other structures and / or functionalities other than one or more of the aspects described herein can be used to implement this device and / or practice this method.

[0036] Terminology explanation:

[0037] AFDX: A network protocol for data communication between avionics equipment, based on Ethernet technology, designed to provide high-bandwidth, low-latency and high-reliability communications to meet the real-time and safety requirements of the aerospace field.

[0038] Full-duplex: refers to the AFDX network in which data can be transmitted in both directions at the same time, allowing devices to send and receive data at the same time.

[0039] Fuzz testing: Fuzz testing is a software testing technique that identifies vulnerabilities and defects in a system by inputting large amounts of random or abnormal data into a program.

[0040] Airborne equipment: Airborne equipment refers to various electronic, mechanical and electrical equipment installed on aircraft to support functions such as flight, navigation, communication, monitoring and control.

[0041] like Figures 1 to 3 The fuzzy testing method of the AFDX network protocol shown is suitable for testing airborne network protocols. The fuzzy testing method includes the following steps:

[0042] S1: Generate a test data packet using configurable parameters (configurable parameters are generally fixed parameters) in the AFDX protocol as input for fuzz testing, wherein the configurable parameters include virtual link configuration, bandwidth configuration, time scheduling configuration, and protocol frame field configuration; generally, the test data packet is used as a test case, for example, the test data packet is generated using an existing test case generation method, such as generating a test data packet for fuzz testing based on generation, mutation, or a combination of both;

[0043] S2: Call the test data packet to test the network protocol;

[0044] S3: Send the test data packet to the device under test through the AFDX network;

[0045] S4: Obtain the test results of the device under test (for example, using existing monitoring, logging or status reporting methods), wherein the test results include the situation or condition of network protocol crash, error, or abnormal network packet loss, jitter and delay during use, then record the parameters of the test data packet and the status of the current network and the device under test;

[0046] S5: Based on the test results, the test cases that cause abnormal scenarios are marked as valid test cases in a manual or automated manner, and the marked valid test cases are fed back to step S1 to generate test data packets of the same type.

[0047] The method of the present invention is different from the traditional testing method. It can cover various fields and boundary conditions of the AFDX protocol by randomly generating diverse inputs, simulate malicious data flows, and discover potential security vulnerabilities and implementation defects. The design of the AFDX protocol does not include a packet return mechanism. The method of the present invention has a result acquisition and feedback mechanism, which can form a closed loop, and help the fuzzy testing device to more effectively identify and locate potential security vulnerabilities, thereby improving the comprehensiveness and accuracy of the test.

[0048] This method is applied in the airborne AFDX network test. It should be pointed out that there is no fuzzy test device for AFDX network in China at present, which is in a blank period, causing the use of AFDX network in airborne in the aviation field to be dormant. AFDX network can maximize the speed and reliability of data exchange and communication functions to replace the traditional data transmission of ARI NC429 and other buses.

[0049] As a specific implementation method provided in this case, a test data packet is generated, including different combinations of virtual link configurations, changes in bandwidth configurations, adjustments to time scheduling configurations, and diversification of protocol frame field configurations.

[0050] As a specific implementation method provided in this case, the test data packet is used to evaluate the performance and security of the AFDX network under different configuration conditions.

[0051] As a specific implementation method provided in this case, the test results include the operating status of the device under test and the test data packet when the system or network is abnormal.

[0052] As a specific implementation method provided in this case, effective test cases include data packets that cause system or network abnormalities.

[0053] Secondly, a fuzzy test device for an AFDX network protocol is provided, which is applied in an airborne AFDX network test and applies the above-mentioned fuzzy test method, including:

[0054] AFDX protocol test case generation module: Generates test cases using configurable parameters in the AFDX protocol as input for fuzz testing;

[0055] AFDX protocol use case scheduling module: according to different test purposes, call the test data packets corresponding to the test purpose for testing;

[0056] AFDX protocol data packet sending module: sends the test data packet to the device under test through the AFDX network;

[0057] AFDX protocol data result acquisition and processing module: adopts the existing data packet processing result acquisition method to obtain the test results of system anomalies or network anomalies from the device under test, including test data packets and the current status of the network and the device under test;

[0058] AFDX protocol parameter valid case feedback module: Based on the test results, the test cases that cause abnormal scenarios are marked as valid test cases in a manual or automated manner, and fed back to the test case generation module to generate the same type of test data packets. Based on the effective test data packets fed back to the AFDX protocol test case generation module, the same type of test parameter sets are generated, and the network protocol is tested in the network through the test parameter sets to discover more potential problems.

[0059] Take the test of airborne equipment using the AFDX network protocol as an example to find out the security issues of airborne equipment using the AFDX network protocol for communication, improve the security and stability of the airborne system, and discover potential vulnerabilities in a timely manner.

[0060] It should be noted that the fuzz testing method can be applied in a fuzz testing device, which can be installed in an onboard device or a separate server. This method is a fuzz testing solution from the perspective of the tester, as follows:

[0061] S1. The fuzz testing method uses the configurable parameters in the AFDX protocol as the input of the fuzz testing to generate test cases, such as fuzz testing the configuration of the virtual link, bandwidth configuration, time scheduling configuration, protocol frame field configuration, etc., and uses the currently existing test case generation methods based on generation, mutation, or a combination of the two to generate test data packets for the fuzz testing.

[0062] For the configuration of a virtual link, the configurable parameters include at least:

[0063] ● Input physical port

[0064] ● Output physical port list

[0065] MAC destination address

[0066] Bandwidth allocation interval

[0067] Maximum allowed jitter

[0068] ●Whether the account is shared ( AC count )

[0069] ●Maximum / minimum allowed total length of Ethernet line

[0070] Priority

[0071] Bandwidth configuration is usually done in the switch configuration file and the terminal device configuration file. The switch configuration file can configure the maximum bandwidth and bandwidth allocation mechanism for each virtual link, and the terminal configuration file can configure the bandwidth parameters sent to the virtual link (such as the maximum sending rate, minimum sending interval, etc.).

[0072] For time scheduling configuration, configurable parameters include time interval, timestamp, and scheduling period.

[0073] For the configuration of the protocol frame fields, such as Figure 2 As shown, the configurable parameters include at least:

[0074] Source address

[0075] Destination address

[0076] Frame length

[0077] Data fields

[0078] Serial number

[0079] Frame Check Sequence and Reserved Field

[0080] S2. Schedule different test data packets according to the test purpose. For example, to test the robustness and fault tolerance of the AFDX network in time scheduling, it is necessary to generate test inputs with different time intervals, timestamps and scheduling cycles to simulate abnormal time triggering modes.

[0081] S3. Send the test data packet to the device under test through the AFDX network.

[0082] S4. Use existing monitoring, logging or status reporting methods to obtain test results from the device under test. If a crash, error, or abnormal packet loss, jitter, or delay occurs, record the test data packet and the current status of the network and the device under test.

[0083] S5. Based on the test results, use manual or automated methods to mark the test cases that cause abnormal scenarios as valid test cases. Based on the valid test case data, feedback is given to the test case generation module to generate test data packets of the same type to discover more potential problems. For test case optimization methods, please refer to:

[0084] Optimization of parameter values: For valid test cases that cause system crashes or exceptions, adjust the corresponding field value range in the test data packet. For example, conduct more in-depth tests on the boundary values ​​of certain key fields (such as frame length and priority) and generate more test cases around the field.

[0085] Adjust randomization strategy: If certain random data triggers anomalies, improve test coverage by generating more similar random data.

[0086] Corresponding to the above method, the embodiment of the present invention also provides a fuzzy testing device for the AFDX network protocol, such as Figure 3 As shown, the fuzzy testing device includes: a generating unit 410, a scheduling unit 420, a sending unit 430, an acquiring unit 440 and a feedback unit 450;

[0087] A generating unit 410 is configured to generate a test case from at least one configurable parameter item in the AFDX protocol as an input for fuzzy testing. In an optional implementation, the at least one configurable parameter item includes at least one of a virtual link configuration, a bandwidth configuration, a time scheduling configuration, and a protocol frame field configuration;

[0088] The scheduling unit 420 is used to schedule at least one test data packet for testing. In an optional implementation, the at least one test data packet scheduled includes at least one of the generated test cases;

[0089] A sending unit 430, configured to send a test data packet to the device under test via the AFDX network;

[0090] The acquisition unit 440 is used to obtain the test results from the device under test, including obtaining the data when a crash, error or abnormal packet loss, jitter and delay occurs, as well as the status of the current network and the device under test;

[0091] Feedback unit 450, used to feed back valid test case data to the test case generation module to generate at least one test data packet of the same type. In an optional implementation, at least one test data packet of the same type includes a new test case generated around the feedback field;

[0092] An embodiment of the present invention further provides an electronic device, including a processor 510 , a communication interface 520 , a memory 530 and a communication bus 540 , wherein the processor 510 , the communication interface 520 , and the memory 530 communicate with each other via the communication bus 540 .

[0093] Memory 530, for storing computer programs;

[0094] The processor 510 is used to execute the program stored in the memory 530 to implement the following steps:

[0095] The configurable parameters in the AFDX protocol are used as the input of the fuzz test to generate test cases, and the test data packets for the fuzz test are generated using the existing test case generation methods based on generation, mutation, or a combination of the two.

[0096] Call the test data package for testing.

[0097] Send the test data packets to the device under test through the AFDX network.

[0098] Use existing monitoring, logging or status reporting methods to obtain test results from the device under test. If a crash, error, or abnormal packet loss, jitter, or delay occurs, record the test data packet and the current status of the network and the device under test.

[0099] Based on the test results, test cases that cause abnormal scenarios are marked as valid test cases in a manual or automated manner. Based on the valid test case data, it is fed back to the test case generation module to generate test data packets of the same type to discover more potential problems.

[0100] The communication bus mentioned above can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0101] The communication interface is used for communication between the above electronic device and other devices.

[0102] The above are only specific embodiments of the present disclosure, but the protection scope of the present disclosure is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present disclosure should be included in the protection scope of the present disclosure. Therefore, the protection scope of the present disclosure should be based on the protection scope of the claims.

Claims

1. A fuzzy testing method for AFDX network protocol, suitable for testing airborne network protocol, characterized in that: The fuzz testing method comprises the following steps: S1: Generate a test data packet using the configurable parameters in the AFDX protocol as input for fuzz testing, wherein the configurable parameters include virtual link configuration, bandwidth configuration, time scheduling configuration, and protocol frame field configuration; S2: calling the test data packet to test the network protocol; S3: Send the test data packet to the device under test through the AFDX network; S4: Obtain the test results of the device under test, wherein the test results include the conditions of network protocol crash, error, abnormal network packet loss, jitter, and delay during use, then record the parameters of the test data packet and the status of the current network and the device under test; S5: Based on the test results, the test cases that cause abnormal scenarios are marked as valid test cases in a manual or automated manner, and the marked valid test cases are fed back to step S1 to generate test data packets of the same type.

2. The fuzzy testing method according to claim 1, characterized in that: The generation of the test data packet includes different combinations of virtual link configurations, changes in bandwidth configurations, adjustments to time scheduling configurations, and diversification of protocol frame field configurations.

3. The fuzzy testing method according to claim 1, characterized in that: The test data packets are used to evaluate the performance and security of the AFDX network under different configuration conditions.

4. The fuzzy testing method according to claim 1, characterized in that: The test results include the operating status of the device under test and the test data packets under system or network abnormalities.

5. The fuzzy testing method according to claim 1, characterized in that: The valid test cases include data packets that cause system or network anomalies.

6. A fuzzy test device for AFDX network protocol, used in airborne AFDX network testing, characterized in that: Applying the fuzz testing method as described in any one of claims 1 to 5, comprising: AFDX protocol test case generation module: Generates test cases using configurable parameters in the AFDX protocol as input for fuzz testing; AFDX protocol use case scheduling module: according to different test purposes, call the test data packets corresponding to the test purpose for testing; AFDX protocol data packet sending module: sends the test data packet to the device under test through the AFDX network; AFDX protocol data result acquisition and processing module: adopts the existing data packet processing result acquisition method to obtain the test results of system anomalies or network anomalies from the device under test, including test data packets and the current status of the network and the device under test; AFDX protocol parameter valid case feedback module: Based on the test results, the test cases that cause abnormal scenarios are marked as valid test cases in a manual or automated manner, and fed back to the test case generation module to generate test data packets of the same type.

Images