基于模糊测试的网络协议漏洞挖掘研究

发布时间：2018-03-24 04:11

本文选题：网络协议漏洞挖掘　切入点：模糊测试　出处：《现代电子技术》2016年13期

【摘要】：随着网络应用程序的发展,网络协议安全性的要求不断提高,模糊测试成为研究热点。在总结了当前研究方向的基础上,重点研究了网络协议识别方法和网络协议的测试用例生成,在启发式搜索算法和概率权值的基础上提出了基于参数权值的启发式模糊测试框架。同时,选取现有模糊测试漏洞挖掘工具Peach进行扩展,其中数据生成模块采用基于参数权值的启发式输入追踪技术,利用IDAPRO提取函数的启发因子形成的启发规则指导测试用例生成过程,基于参数权值确定测试用例的发送顺序。最后,采用开发工具对常用的FTP协议进行了验证,通过测试结果验证了基于参数权值的启发式模糊测试框架达到了预期效果。
[Abstract]:With the development of network application program, the requirement of network protocol security has been improved, and fuzzy test has become a research hotspot. The method of network protocol identification and the test case generation of network protocol are studied. Based on the heuristic search algorithm and probability weight, a heuristic fuzzy test framework based on parameter weight is proposed. The existing fuzzy test vulnerability mining tool Peach is selected to extend, in which the data generation module adopts the heuristic input tracking technology based on parameter weights, and uses the heuristic rules formed by the heuristic factor of the IDAPRO extraction function to guide the test case generation process. The transmission order of test cases is determined based on parameter weights. Finally, the commonly used FTP protocol is validated by development tools, and the heuristic fuzzy test framework based on parameter weights is verified by the test results to achieve the desired results.
【作者单位】：郑州成功财经学院;
【分类号】：TP393.08

【相似文献】