一种高效率的主动式漏洞挖掘平台

摘要

软件测试的漏洞发掘技术在快速扩展的互联网软件数量需求下，其存在效率低下，适应测试环境的能力不强以及对软件外部代码的跟踪能力弱等问题。在这种情形下，开发了一种主动式的多漏洞挖掘式数据平台（MLIIMP）。一方面，该平台能够主动触发软件测试系统在运行时的位置漏洞；另一方面，系统在引入路径搜索时还插入了新的函数模型，该模型的作用是保障符号传播性能的大幅提升。漏洞测试结果表明这种平台在进行漏洞挖掘方面的效率有较大优势。%Under the demands of fast extended Internet software quantity,the vulnerability mining technology for software testing has the disadvantages of low mining efficiency,poor tracking ability for the software′s external code and poor adaptation ability for test environment. For the above problems,the many loopholes initiative integrated mining platform(MLIIMP)was de⁃veloped. The platform can initiatively trigger the position loophole when the software testing system is running. The new function model is inserted when the path search is introduced into the system,which can greatly improve the symbols propagation perfor⁃mance. The vulnerability test results show that the platform has a great advantage to improve the vulnerability mining efficiency.