Research on fuzzy security testing of document format based on formal method

摘要

In this paper, the formal method is applied to the fuzzy testing of document format to meet the requirement of corresponding security testing. The general format Uniform Office Format (UOF) of Chinese office software is taken as an example. This paper studies the description of the structure, characteristics and interdependence of the document format by Z language, and proposes a method used for formal document format feature extraction and fuzzy testing case generation. Further, this paper presents a design scheme of FileFTester, a document format security testing tool, which can not only automatically generate test cases, but also adapt to various office document format security testing. The tool is universal and scalable.