基于改进轮盘赌策略的反馈式模糊测试方法  

Feedback Fuzzing Based on Improved Roulette Wheel Selection Strategy

作　　者：蔡军 邹鹏 沈弼龙[2] 何骏 

机构地区：[1]装备学院复杂电子系统仿真实验室,北京101416 [2]清华大学计算机科学与技术系,北京100084

出　　处：《四川大学学报（工程科学版）》2016年第2期132-138,共7页Journal of Sichuan University (Engineering Science Edition)

基　　金：国家高技术研究发展计划资助项目(2012AA012902);"核高基"国家科技重大专项基金资助项目(2013ZX01045-004)

摘　　要：为了解决传统模糊测试方法测试盲目效率低下的问题,提出一种反馈式模糊测试方法。该方法通过对传统模糊测试方法的流程进行优化来提高测试效果。通过网络爬虫收集原始样本文件,确保原始样本的多样性。通过代码覆盖率分析来从大量样本文件中筛选用于变异的最佳种子文件,在保证足够的测试空间的同时避免冗余测试。通过对种子文件进行变异来生成测试用例,并根据测试结果基于改进轮盘赌策略不断调优对种子文件的变异参数,以期发现尽可能多的软件故障。实现了一个原型系统OSSRWSFuzzer,在实验中发现了WPS Office for Linux软件的56个故障,其测试效果明显优于现有模糊测试工具。In order to solve the problem of blindness and poor efficiency of traditional fuzzing,a feedback fuzzing method was proposed.This method can improve the test effect by optimizing the process of traditional fuzzing. Firstly,original sample files were collected via a web crawler to ensure the diversity of them. Then,the best seed file was selected from a large number of sample files,to avoid redundant testing while ensuring adequate testing space. Finally,test cases were generated by mutating the seed file,and the mutation parameters was continuously adjusted according to the testing result based on improved roulette wheel selection strategy,in order to find as many software failures as possible. A prototype system named OSSRWSFuzzer was implemented,which had found 56 failures of WPS Office for Linux in experiments,and its test effect is obviously better than that of the existing fuzzers.

关 键 词：反馈式模糊测试 种子优选 轮盘赌选择 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]