Text configuration file-oriented fuzzy test method and device

A fuzz testing and configuration file technology, applied in software testing/debugging, error detection/correction, instruments, etc., can solve the problem of insufficient fuzzing efficiency and coverage, and achieve the effect of improving fuzzing efficiency

Active Publication Date: 2020-11-10
INST OF INFORMATION ENG CHINESE ACAD OF SCI
View PDF7 Cites 2 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

But the same fuzzing method, that is, mutation algorithm, the efficiency and coverage of fuzzing for different types of input programs are not high enough

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Text configuration file-oriented fuzzy test method and device
  • Text configuration file-oriented fuzzy test method and device
  • Text configuration file-oriented fuzzy test method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0049]In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

[0050] figure 1 It is a schematic flowchart of a method for multiplexing ECG electrodes into buttons provided by an embodiment of the present invention, figure 2 It is a schematic flowchart of another method for multiplexing ECG electrodes into buttons provided by the embodiment of the present invention, as shown in figure 1 and 2 As shown, the...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The embodiment of the invention provides a text configuration file-oriented fuzzy test method and device, and the method comprises the steps: recognizing a text file format type of a target configuration file, and determining a key value key value pair of the target configuration file; performing a pre-fuzzy test on a program taking the target configuration file as an input to detect whether the program has a vulnerability in format or not, extracting all visible character strings in the program, and mutating keys in a key pair of the target configuration file to obtain a key combination seedfile; and on the basis of the weight of the key in the key combination seed file, mutating the value corresponding to the key in the key combination seed file to obtain a new combination seed file, and mining the vulnerability of the program. According to the embodiment of the invention, deep vulnerabilities in a program are comprehensively mined, and the text configuration file-oriented fuzzy test efficiency is improved.

Description

technical field [0001] The invention relates to the field of loophole mining and analysis, in particular to a fuzzy testing method and device for text configuration files. Background technique [0002] Fuzz testing is a technology that exploits vulnerabilities in software or systems in a dynamic way. The fuzz testing tool is represented by AFL. Its concept is dynamic execution and path coverage improvement. The general implementation method is to use the seed file as the input to actually execute the test program, and at the same time record the execution path corresponding to each seed file by means of instrumentation, and then Try to mutate the seed file, so that the mutated seed file can be used as program input to allow the program to go through different execution paths. [0003] In the prior art of fuzz testing, the input types are often varied, which can be network data input through sockets, or reading input from program command line parameters, or directly from the...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F11/36
CPCG06F11/3684G06F11/3688
Inventor 宋站威曾怡诚刘明东朱红松李志孙利民石志强
Owner INST OF INFORMATION ENG CHINESE ACAD OF SCI
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap