Network protocol security fuzz testing method, device and equipment, and storage medium

Abstract

The invention relates to the technical field of network security testing, in particular to a network protocol security fuzz testing method, device and equipment and a storage medium, and the network protocol security fuzz testing method comprises the steps: obtaining a preset RFC document and a to-be-tested network protocol type, obtaining a to-be-processed protocol template from the RFC document according to the to-be-tested network protocol type; obtaining corresponding fuzzy data from each protocol template to be processed; performing fuzzification processing on the fuzzifiable data in each to-be-processed protocol template by adopting a preset fuzzy algorithm to obtain a to-be-tested network protocol and an original network protocol corresponding to the to-be-tested network protocol; and circularly using the to-be-tested network protocol to perform a security test, and counting available vulnerability information according to a test result. The application has the effect of enriching the application environment of the fuzzy test tool.

Description

technical field [0001] The invention relates to the technical field of network security testing, in particular to a network protocol security fuzz testing method, device, equipment and storage medium. Background technique [0002] At present, fuzz testing is an important security testing technology, which is widely used in the security testing of complex systems such as computer systems, network communication systems, and IoT devices, and is also one of the necessary methods for penetration testing. Its core idea is to automatically or semi-automatically generate special test data and send it to the object under test, and monitor the working status of the object under test in real time to detect whether the object under test is working abnormally, such as crashes, assertion failures, and service interruptions. Discovering the potential security vulnerabilities of the tested object, such as buffer overflow, deadlock, etc., is one of the important means of security testing and...

AI Technical Summary

Problems solved by technology

[0003] When the existing fuzz testing tools are used for security testing of network protocols, due to the complex application environment of network security, there are various network attacks when users use it normally, and the existing fuzz testing tools are difficult to satisfy various users. Therefore, there is an urgent need for new fuzz testing tools to meet the needs of many parties

Images