基于模型学习的网络安全协议脆弱性分析系统  

Network Security Protocol Vulnerability Analysis System Based on Model Learning

作　　者：申莹珠 顾纯祥[1,2] 陈熹 SHEN Yingzhu;GU Chunxiang;CHEN Xi(Information Engineering University,Zhengzhou 450001,China;State Key Laboratory of Mathematical Engineering and Advanced Computing,Wuxi 214125,China)

机构地区：[1]信息工程大学,河南郑州450001 [2]数学工程与先进计算国家重点实验室,江苏无锡214125

出　　处：《信息工程大学学报》2019年第1期111-115,共5页Journal of Information Engineering University

基　　金：河南省科技创新杰出青年基金(134100510002)

摘　　要：针对网络协议中日益凸显的安全问题,基于自动机理论中的模型学习技术,利用协议状态模糊测试方法对网络协议进行黑盒测试,提出并实现了网络安全协议脆弱性分析检测系统。该系统能够自动化推演出目标协议具体实现的状态机模型,将系统用于OpenVPN2.0.9进行测试,推断出的状态机能非常清晰地展现协议具体实现的全部行为:期望中的行为和特殊行为,通过分析对比其与协议规范设计之间存在的差异性能够寻找可能存在的攻击路径。In view of the increasingly prominent security problems of network protocols,this paper uses the protocol state fuzzing method to do black-box test for the network protocols based on the model learning technology in automata theory.Besides,it proposes and implements the vulnerability analysis and detection system of network security protocols.The system could be used to infer the state machine models of the target protocols automatically.We apply it with OpenVPN 2.0.9 for testing and find that the inferred state machine demonstrates all behaviors of its implementation very clearly: expected behaviors and special behaviors.By analyzing the differences between the protocol specification and its existence,we can find possible attack paths.

关 键 词：模型学习 协议状态模糊测试 状态机推断 脆弱性分析系统 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]