基于控制流序位比对的智能 Fuzzing 测试方法

摘要

在国际前沿技术 EFS(evolutionary fuzzing system)的研究基础上，提出基于控制流序位比对算法的智能Fuzzing 测试方法。根据遗传算法的内在属性演算得到基于序列比对的适应度函数，并有效地计算出需要搜索的程序逻辑空间。最后给出了该方法与2种传统 Fuzzing 方法的测试性能的实验结果比对，证明了该方法能够充分利用遗传算法属性中并行性进行智能地程序逻辑学习，具有逻辑覆盖面广、搜索导向性强的优点，能够提高漏洞挖掘能力。%Flowing the way introduced in the research of evolutionary fuzzing system (EFS), a smart fuzzing method was proposed based on the node comparison algorithm among the control flow sequences. Through mapping program execu-tion flow sequences onto the control flow sequences, the isomorphism relationship between dada search space and pro-gram logic space was established. The analyzed results prove that the method is capable of mining a mass of information from group data effectively, and is able to fully utilize the parallelism of genetic algorithm to guide the fuzzing test.