The vulnerability mining technology is studied and analyzed. For the client application program,a Fuzzing-based vulnerability mining method of client application program is proposed,the Fuzzing testing method based on data packet content and network data automatic analysis method are studied,and the automatic acquisition problem of client network data packet is solved. The experimental results show that the proposed method has wider testing range and faster testing speed than the main-stream testing methods. A vulnerability mining method based on Fuzzing is put forward for Web application program. The script and test data set based Fuzzing test method of Web application program is studied to solve the problem of data collection in Web network. The experimental results show that the proposed method has wider testing range and stronger scalability than the main-stream Web vulnerability detection tools.%研究和分析了漏洞挖掘技术,针对客户端应用程序提出一种基于Fuzzing的客户端应用程序漏洞挖掘方法,研究了网络数据自动分析的方法和基于数据包内容的Fuzzing测试的方法,解决了客户端网络数据包自动采集的问题.实验结果表明,该方法相比主流测试方法,可测试范围广,测试速度快.针对Web应用程序提出一种基于Fuzzing的Web应用程序漏洞挖掘方法.研究了基于脚本和测试数据集的Web应用程序Fuzzing测试方法,解决了Web网络数据采集的问题.实验结果表明,该方法比主流Web漏洞检测工具检测范围广,可扩展性强.
展开▼
