基于Fuzzing的军用报文软件漏洞发掘技术  

Military Message Software Vulnerability Exploiting Technology Based on Fuzzing

作　　者：王海涛 李云[1] 秦晓燕 汪玉美[1] 

机构地区：[1]陆军军官学院二系,合肥230031

出　　处：《计算机工程》2012年第18期61-64,共4页Computer Engineering

基　　金：院校科研基金资助项目(2011XYJJ-073)

摘　　要：分析军用报文格式及其软件特点,给出一种智能强制性Fuzzing测试的畸形数据构造方法。根据Fuzzing技术的原理,设计军用报文软件漏洞发掘系统MTSFuzzer,并对其构架、模块以及关键技术进行描述。测试结果表明,MTSFuzzer能提高军用报文软件漏洞的发掘效率,并且具有较好的可扩展性。In view of military message structure and characteristics of its software,an intelligent brute Fuzzing test approach for construction of abnormality data is proposed.According to the principles and ideas of Fuzzing,military message software security vulnerability discovery system named MTSFuzzer is developed.Meanwhile,software architecture,modules and key techniques are analyzed.Test result shows that MTSFuzzer improves the efficiency of military message software vulnerability exploiting,and it has good expansibility.

关 键 词：FUZZING技术 军用报文软件 漏洞发掘 系统构架 畸形数据 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]