基于启发式搜索和分类树的网络协议模糊测试用例生成方法研究

摘要

The fuzzy test is an effective method of security detection and vulnerability mining,which can find out the sys-tem vulnerabilities by means of injecting massive unexpected inputs to the target system. The test case generation method as one of the key issues of the network protocol fuzzy test is studied. The significance,method and key issues of network protocol fuzzy test are discussed. The heuristic network protocol fuzzy test case generation method is proposed based on the heuristic search al-gorithm and classification tree thought. The Peach and FTP are selected as the verification platform and target protocol respec-tively. The tool IDA Pro is used to extract the heuristic operator,and write it into the configuration file to guide the test case generation process of target protocal. The test result verified the feasibility and effectiveness of fuzzy test case generation method of heuristic network protocol.%模糊测试通过向目标系统注入大量的非预期输入找出系统漏洞,是安全检测和漏洞挖掘的有效方法.针对网络协议模糊测试的关键问题之一——测试用例生成方法进行研究,论述了网络协议模糊测试的意义、方法和关键问题,在启发式搜索算法和分类树思想的基础上提出了启发式网络协议模糊测试用例生成方法,分别选取模糊器Peach和FTP作为验证平台与目标协议,借助IDAPro工具提取启发算子并将其写入配置文件,用于指导目标协议测试用例的生成过程,通过测试结果分析验证了启发式网络协议模糊测试用例生成方法的可行性与有效性.