Method for performing security tests relative to protocol implementations for e.g. connecting distributedly arranged computers in communication industry, involves performing fuzz testing relative protocol implementation using applications

摘要

The method involves performing (207) a syntax test relative to mutated notifications corresponding to syntactic restrictions for obtaining valid mutated notifications, which are contradictory to the restrictions, and contained in the mutated notifications. The valid mutated notifications containing mutated test sequences are used as test sample applications. A fuzz testing is performed (208) relative to protocol implementation using the test sample applications for testing whether the applications or security holes corresponding to the applications exist in the protocol implementation. Independent claims are also included for the following: (1) a device for performing security tests relative to protocol implementations (2) a computer readable medium comprising instructions for performing a method for performing security tests relative to protocol implementations (3) a computer program comprising instructions for performing a method for performing security tests relative to protocol implementations.