Fuzz Testing Based on Virtualization Technology

被引:2
|
作者
Zhou, Longbin [1 ]
Li, Zhoujun [1 ]
机构
[1] Beihang Univ, 37 Xueyuan Rd, Beijing, Peoples R China
关键词
Fuzz testing; Virtualization Technology; Code coverage;
D O I
10.1145/3194452.3194477
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
As people pay more and more attention to software security, the technology of vulnerability mining has gradually become the research hotspot in the industry. Fuzz testing is the mainstream of the vulnerability mining technology. In order to solve the shortcomings of the traditional document fuzz testing, such as efficiency is not high and the function is missing, so a new method of document fuzz testing will be introduced. In this paper, there will be a new way to streamline the test sample. It depends on the code coverage. So the smallest sample set of maximum code coverage will be gotten by using this method. It relies on virtual machine technology, it is more reliable and more accurate than Binary instrumentation technology. This method can effectively reduce a large number of invalid test.
引用
收藏
页码:57 / 61
页数:5
相关论文
共 50 条
  • [1] Fuzz Testing based on Sulley Framework
    Guo, Zhong
    Li, Nan
    CURRENT TRENDS IN COMPUTER SCIENCE AND MECHANICAL AUTOMATION, VOL 1, 2017, : 181 - 187
  • [2] Improving Security Testing with Usage-Based Fuzz Testing
    Schneider, Martin A.
    Herbold, Steffen
    Wendland, Marc-Florian
    Grabowski, Jens
    RISK ASSESSMENT AND RISK-DRIVEN TESTING, 2015, 9488 : 110 - 119
  • [3] CSEFuzz: Fuzz Testing Based on Symbolic Execution
    Xie, Zhangwei
    Cui, Zhanqi
    Zhang, Jiaming
    Liu, Xiulei
    Zheng, Liwei
    IEEE ACCESS, 2020, 8 : 187564 - 187574
  • [4] Fuzz Testing in Behavior-Based Robotics
    Delgado, Rodrigo
    Campusano, Miguel
    Bergel, Alexandre
    2021 IEEE INTERNATIONAL CONFERENCE ON ROBOTICS AND AUTOMATION (ICRA 2021), 2021, : 9375 - 9381
  • [5] Network Protocol Security Testing Based on Fuzz
    Li Haifeng
    Wang Shaolei
    Zhang Bin
    Shuai Bo
    Tang Chaojing
    PROCEEDINGS OF 2015 4TH INTERNATIONAL CONFERENCE ON COMPUTER SCIENCE AND NETWORK TECHNOLOGY (ICCSNT 2015), 2015, : 955 - 958
  • [6] RankFuzz: Fuzz Testing Based on Comprehensive Evaluation
    Li, Cheng
    Wei, Qiang
    Wang, Qingxian
    2012 FOURTH INTERNATIONAL CONFERENCE ON MULTIMEDIA INFORMATION NETWORKING AND SECURITY (MINES 2012), 2012, : 939 - 942
  • [7] The Detection Technology of LTE based Stratified Fuzz
    Yang, Jun
    Yang, Haixia
    Xiao, Qinshu
    ADVANCES ON BROAD-BAND WIRELESS COMPUTING, COMMUNICATION AND APPLICATIONS, 2017, 2 : 401 - 409
  • [8] Evaluating Fuzz Testing
    Klees, George
    Ruef, Andrew
    Cooper, Benji
    Wei, Shiyi
    Hicks, Michael
    PROCEEDINGS OF THE 2018 ACM SIGSAC CONFERENCE ON COMPUTER AND COMMUNICATIONS SECURITY (CCS'18), 2018, : 2123 - 2138
  • [9] Software performance testing scheme using Virtualization technology
    Kim, Gwang-hun
    Moon, Hui-choun
    Song, Gi-pyeung
    Shin, Seok-Kyu
    PROCEEDINGS OF THE 4TH INTERNATIONAL CONFERENCE ON UBIQUITOUS INFORMATION TECHNOLOGIES & APPLICATIONS (ICUT 2009), 2009, : 439 - 443
  • [10] Research on Fuzz Testing Framework based on Concolic Execution
    Xie, Xiong
    Chen, Yuhang
    INTERNATIONAL CONFERENCE ON COMPUTER SCIENCE AND APPLICATION ENGINEERING (CSAE), 2017, 190 : 150 - 158