关于应用软件中信息漏洞快速检测仿真研究  

Simulation Research on Information Leak Detection in Application Software

作　　者：李蕴[1] 

机构地区：[1]烟台大学文经学院,山东烟台264005

出　　处：《计算机仿真》2017年第3期381-384,共4页Computer Simulation

基　　金：烟台大学文经学院青年基金重点项目(2014QNJJA01)

摘　　要：对应用软件中信息漏洞快速检测,可以有效地提升软件的质量。信息漏洞的检测需要对种子信息文件进行变异测试,提取每组软件测试序列特征值,来完成信息漏洞的快速检测。传统方法将软件测试用例对代码块的覆盖率定义为对适应度值评价,但无法精确的提取每组软件测试序列特征值,导致漏洞检测的精度偏低。提出基于模糊理论的应用软件中信息漏洞快速检测方法。融合于直觉模糊理论提取不同软件测试序列特征值,通过增加模糊特征的犹豫程度提升元素特征在HSV空间内的映射精度,基于改进轮盘赌策略从大量漏洞样本文件中筛选用于变异的最佳种子文件,对种子文件进行变异形成测试用例,给出每个测试序列的适应度,由此完成对应用软件中信息漏洞快速检测。仿真结果表明,所提方法检测精度高,可以有效地完成对应用软件中信息漏洞快速检测。A rapid detection method for information loophole in application software is presented based on fuzzy theory.Firstly,the feature values of test sequences of different software are extracted integrated with intuitionistic fuzzy theory.The mapping precision of element feature in HSV space is elevated through increasing degree of hesitation of fuzzy feature.Then,the optimum seed file used for variation form quantities of sample files of loophole is screened based on modified roulette strategy.Moreover,the seed file is mutated to generate the test case.Finally,the fitness of each test sequence is given out and thus the rapid detection of information loophole is completed.Simulation results show that the method has high detection precision.It can complete the rapid detection effectively.

关 键 词：应用软件 信息漏洞 快速检测 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]