变异策略动态构建的模糊测试数据生成方法

Fuzzing Test Data Generation Method Based on Dynamic Construction of Mutation Strategy

  • 摘要: 模糊测试中随机变异生成的测试数据破坏了目标程序的输入规范,导致测试数据无法通过验证,造成代码覆盖率低.针对这一问题,提出了一种变异策略动态构建的模糊测试数据生成方法,该方法利用插桩执行的反馈信息动态构建控制变异策略和关键字变异策略,指导模糊器变异出高覆盖率的测试数据.实验结果表明,与随机变异相比,该方法平均使代码分支覆盖率提高了约40%;该方法能够有效提高模糊测试的效率,具有较强的实用价值.

     

    Abstract: The test data generated by random mutation in fuzz testing destroys the input specification of the target program, which leads to the failure of test data verification and low code coverage. Aiming at this problem, a fuzzing test data generation method was proposed based on dynamic construction of mutation strategy. The method was designed to use the feedback information of instrumentation to dynamically construct the control mutation strategy and the keyword mutation strategy, and to guide the fuzzer to generate test data with high coverage. Experimental results show that compared with random mutation, this method can improve the code branch coverage by about 40% on average. This method can effectively improve the efficiency of fuzz testing, and has a strong practical value.

     

/

返回文章
返回