A browser testing method, device and computer equipment

Abstract

The present application relates to a browser testing method, device and computer equipment. The browser testing method, device and computer equipment maintain a complete browser environment and run the overall browser during browser testing. On this basis, by isolating the test tool and the object under test, that is, the browser, on the process, the test tool runs in the low-privilege test process, and the browser code to be tested that has completed the instrumentation runs in the high-privilege browser. The browser process simulates the normal user access to the browser, and realizes the cross-process and cross-authority testing of the browser under the simulation of normal interaction scenarios. This kind of test is more in line with the actual situation of the user's daily operation of the browser, and it is easier to mine Common and easy-to-reproduce security vulnerabilities of browsers can be found, so that browser vulnerabilities can be further accurately and comprehensively mined.

Description

technical field [0001] The application belongs to the technical field of browser vulnerability mining, and in particular relates to a browser testing method, device and computer equipment. Background technique [0002] Browser vulnerability mining is an important link in the browser security mechanism. At present, when conducting browser testing to mine browser vulnerabilities, the main testing tools used are AFL or LibFuzzer, two open source software. [0003] AFL, or American fuzzy lop, is a security-oriented fuzz testing tool that uses genetic algorithms to effectively increase the code coverage of test cases. AFL is open source and developed by Zalewski hosts on his website. LibFuzzer is an open source software developed by Google. It is an in-process, coverage-oriented, mutation testing fuzzing engine. ) feeds the fuzzed input to the library, the Fuzzer then tracks which regions of the code are reached and generates mutations on the corpus of input data in order to m...

AI Technical Summary

Problems solved by technology

[0004] The above two test tools all need to perform browser testing in the same process (single process), that is, introduce the browser function module code to be tested into the test tool, and run and test the browser function module code in the process started by the test tool. Code (Although AFL is a multi-process model, it just keeps starting itself, which is essentially equivalent to testing the browser based on a single process), so, on the one hand, when AFL and libfuzzer are testing the browser, the tested module It will run in isolation from the overall environment of the browser, which will affect the test effect accordingly; on the other hand, AFL and libfuzzer can only simulate the operation in a single process, and cannot simulate the interaction between the user and the browser in normal usage scenarios, which will also affect The test results of the browser cannot accurately and comprehensively dig out the potential vulnerabilities of the browser

Images