扩展的语义分析的WAP协议缺陷测试  

An Extended Vulnerability Testing of WAP Protocol through Syntax Analysis

作　　者：龙钊[1] 李巍海[1] 刘刚[1] 吕玉琴[1] 

机构地区：[1]北京邮电大学电子工程学院,北京100876

出　　处：《世界科技研究与发展》2009年第1期77-80,共4页World Sci-Tech R&D

基　　金：国家自然科学基金资助项目(编号:60772111)

摘　　要：首先介绍了一种基于语义分析的缺陷测试技术。该测试方法利用语义测试及软件错误注入来进行测试。它比传统测试的成本要小,同时能达到很好的效果。但该方法只能检测协议实现级别的漏洞,而不能检测协议设计中可能存在的缺陷。本文结合了Petri网在协议测试方面的优点提出了一种扩展的语义分析的协议缺陷测试方法。它能通过对协议Petri网模型的分析来捕获协议层面的缺陷,而为此所需的额外开销是很小的。这弥补了原缺陷测试在协议层面的不足。之后对该方法各个阶段进行了介绍。对WAP-WSP协议的进行了缺陷测试,并对结果进行了分析,证明其可行性。A vulnerability testing method based on syntax analysis is introduced first.The testing method works by syntax testing and software fault injection and it costs less than traditional testing methods to achieve good effect.However,it can only catch the bugs on implementation level,but can not check the bugs on protocol design level.In this paper,an extended vulnerability testing method for communication protocol, which is combined with the superiority of Petri Net system,is brought forward.The extended method can catch the bugs on protocol design level by analyzing the Petri Net model of the protocol,and the additional cost is small.A vulnerability testing of WAP-WSP protocol is made and the result is analyzed to prove the feasibility of the method.

关 键 词：缺陷测试 语义分析 协议测试 VOPN PETRI网 

分 类 号：TP393.04[自动化与计算机技术—计算机应用技术]