基于模糊测试的DNS软件缺陷检测方法研究  

Research on DNS Software Defect Detection Method Based on Fuzzing Testing

作　　者：张山花 ZHANG Shanhua(Gientech Digital Technology Group Co.,Ltd.,Beijing 100080)

机构地区：[1]中电金信数字科技集团有限公司,北京100080

出　　处：《软件》2024年第12期147-149,共3页Software

摘　　要：域名系统(DNS)是互联网通信的基础,通过将域名解析为IP地址实现用户对主机的访问。随着网络的迅速发展,DNS软件的安全性问题引起广泛关注。现有DNS软件缺陷检测方法主要分为静态和动态分析两类,但在代码覆盖率和实际检测能力方面存在诸多局限。本文提出一种基于模糊测试的DNS软件缺陷检测方法,通过语义化的测试用例生成、双端交互机制以及缓存机制的优化,全面提升DNS缺陷检测的覆盖率和准确性。The Domain Name System(DNS)is the basis of Internet communication.Users can access the host by resolving the domain name to an IP address.With the rapid development of the Internet,the security problem of DNS software has attracted widespread attention.Existing DNS software defect detection methods are mainly classified into two categories:static and dynamic analysis,but there are many limitations in terms of code coverage and actual detection capability.In this paper,we propose a DNS software defect detection method based on fuzzy testing,which comprehensively improves the coverage and accuracy of DNS defect detection through semantic test case generation,double-end interaction mechanism,and optimization of caching mechanism.

关 键 词：DNS缺陷检测 模糊测试 语义化测试用例 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]