结合静态分析的软件脆弱性测试方法  

Software vulnerability testing method with static analysis

作　　者：王丹[1] 刘勇[1] 吴咏[1] 朱鲁华[1] 

机构地区：[1]江南计算技术研究所,江苏无锡214083

出　　处：《计算机工程与设计》2011年第5期1698-1701,1865,共5页Computer Engineering and Design

基　　金：国家973重点基础研究发展计划基金项目(2007CB310907)

摘　　要：Fuzzing是一种有效的软件脆弱性动态测试方法,为了避免传统Fuzzing技术的盲目性所导致的测试效率低下的问题,提出了静态分析和遗传算法相结合来指导Fuzzing数据生成的方法,并设计实现了一个智能化的Fuzzing系统SFS(smartfuzzing system)。触发脆弱点的前提是覆盖脆弱性语句,该方法通过静态分析技术提取脆弱性语句,并用遗传算法指导测试用例对脆弱性语句进行覆盖,从而提高脆弱性语句的覆盖效率,避免Fuzzing的盲目性。Fuzzing is an effective method of software vulnerability dynamic testing. To avoid the low efficiency due to the blindness of traditional Fuzzing technology, a method of guiding Fuzzing data generation by the combination of static analysis and genetic algorithm is presented, and a Fuzzing system SFS （smart Fuzzing system） is designed and implemented. The premise of triggering vulnerable points is the coverage of vulnerable statements. By using static analysis to extract vulnerable statements and using genetic algorithm to cover vulnerable statements, this method can improve the efficiency of the vulnerable statement coverage and avoid the blindness of Fuzzing.

关 键 词：FUZZING 静态分析 遗传算法 脆弱性语句 语句覆盖 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]