基于机器学习的模糊测试系统  

A Machine Learning-Based Fuzzing System

作　　者：赵浩东 康晓凤[1] 李慧[1] 陈聪 袁杨坤 刘子豪 

机构地区：[1]徐州工程学院信息工程学院(大数据学院),江苏 徐州

出　　处：《人工智能与机器人研究》2025年第2期341-349,共9页Artificial Intelligence and Robotics Research

基　　金：本文是江苏省大学生创新创业计划项目(xcx2024180),徐州工程学院大学生创新创业项目(xcx2024190)的阶段性成果之一。

摘　　要：随着信息技术的发展和漏洞类型日益复杂化,如何更高效、简洁、有序地测试软件漏洞,辅助软件开发人员更好地开发软件成为网络安全领域的重要研究方向。本文提出了一种基于机器学习的模糊测试系统,涵盖自动模糊测试监视、待测程序管理、自主选择更优变异策略、自动生成程序测试报告等模块。系统采用了机器学习技术,对Havoc变异算法变异生成的种子进行进一步筛选变异,提高对程序漏洞检测的效率与覆盖率。实验表明,该系统能在模糊测试中生成多样、有效的变异种子,适用于复杂的程序漏洞检测。With the advancement of information technology and the increasing complexity of vulnerability types, how to more efficiently, succinctly, and systematically test software vulnerabilities, thereby assisting software developers in improving their development processes, has become a significant research focus in the field of cybersecurity. This paper introduces a machine learning-based fuzzing system that includes modules for automatic fuzzing monitoring, management of the program under test, autonomous selection of optimal mutation strategies, and automatic generation of program testing reports. The system employs machine learning techniques and utilizes the Havoc mutation algorithm to mutate and expand seeds of input programs, enhancing the efficiency and coverage of program vulnerability detection. Experimental results show that this system can generate diverse and effective mutation seeds during fuzzing tests, making it suitable for detecting complex program vulnerabilities.

关 键 词：漏洞检测 模糊测试 Havoc变异算法 网络安全 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]