Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Public component library automatic testing method and device based on guidance of push-down automaton

A technology of automated testing and common components, applied in software testing/debugging, error detection/correction, instrumentation, etc., can solve the problems of lack of model guidance, time-consuming and error-prone, and achieve the effect of high code coverage

Pending Publication Date: 2022-05-27
PLA STRATEGIC SUPPORT FORCE INFORMATION ENG UNIV PLA SSF IEU
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] The present invention aims at manual writing of the driver program, which usually requires security personnel to have a deep understanding of the source code of the program, and the process of writing the driver program is time-consuming and error-prone; and the problem that the existing automatic driver program generation technology lacks model guidance when generating function call sequences , a method and device for automated testing of public component libraries based on pushdown automaton guidance are proposed, which can remove source code dependencies, effectively generate function call sequence synthesis drivers, and perform automated testing

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Public component library automatic testing method and device based on guidance of push-down automaton
  • Public component library automatic testing method and device based on guidance of push-down automaton
  • Public component library automatic testing method and device based on guidance of push-down automaton

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0051] The present invention will be further explained below in conjunction with the accompanying drawings and specific embodiments:

[0052] The specific implementation process of the public component library automated testing method and tool guided by pushdown automata is described as follows: First, in the preprocessing stage, the dynamic binary instrumentation method is used to analyze files from multiple sources, and the users of the public component library (binary program), and then obtain the metadata and execution track of the API function, where the metadata includes information such as output parameters, return values, thread IDs, and function addresses. Then collect data dependencies and control dependencies from the preprocessing stage through dependency analysis. Data dependencies describe potential dependencies between parameters and return values ​​in API function calls, including dependencies within and between API functions; control dependencies Indicates how...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a push-down automaton guided public component library automatic test method and device, and the method comprises the steps: carrying out the function tracking and information extraction through a dynamic binary instrumentation method for a binary public component library and a user program, obtaining the execution track and metadata of an API function, and screening an output parameter and a return value; according to the obtained function execution track, the output parameter and the return value, data dependency analysis and control dependency analysis are adopted to extract data dependency information and control dependency information; constructing a function path exploration model based on the push-down automaton model, the data dependency information and the control dependency information, and generating a function call sequence through the function path exploration model; and synthesizing the obtained metadata and the function call sequence into a driving program, and carrying out automatic testing. According to the method, dependence of source codes can be removed, the function call sequence synthesis drive program is effectively generated, and automatic testing is carried out.

Description

technical field [0001] The invention belongs to the technical field of software security testing, and in particular relates to an automatic testing method and device for a public component library guided by a push-down automaton. Background technique [0002] A common component library is a collection of functions with a well-defined interface, and various independent programs can use the functions of a common component library developed by other developers. The reuse of this feature has contributed to the field of computer science because of its low implementation time and cost and high production efficiency. However, vulnerabilities in the Common Component Library can be more severe than those in other software because they affect various programs that use the Common Component Library. Therefore, security testing of public component libraries, such as grey-box fuzzing, is required to prevent preemptive security breaches. However, since the public component library cannot...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F11/36
CPCG06F11/3684G06F11/3688
Inventor 武泽慧宗国笑尹中旭袁会杰魏强周国淼王允超
Owner PLA STRATEGIC SUPPORT FORCE INFORMATION ENG UNIV PLA SSF IEU
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products