The invention discloses an automatic network protocol
fuzz testing system, particularly relates to the field of automatic network
protocol testing, is used for solving the problems of protocol
vulnerability detection and security
verification, and improves the coverage rate and efficiency of
protocol testing through an automatic network protocol
fuzz testing system. The method comprises the following steps: firstly, capturing and recording complete communication data, generating an FSA of a protocol, mapping a protocol state and a conversion process by utilizing a
proxy server, and performing message clustering and state association analysis and simplifying protocol behavior analysis by generating a GMS; secondly, dynamically analyzing the stability of the protocol state and the difference of the message sequence, intelligently selecting a deterministic or non-deterministic test function, and widely covering a protocol behavior scene; in the testing process, input, output and state information is recorded in real time, and the protocol state is automatically reset or returned when abnormity occurs, so that the continuity and
traceability of the test are ensured. The potential vulnerabilities can be found comprehensively, the manual test
workload is reduced, and the security and robustness of the protocol are ensured.