###
工程科学与技术:2016,48(2):132-138
←前一篇   |   后一篇→
本文二维码信息
码上扫一扫!
基于改进轮盘赌策略的反馈式模糊测试方法
(1.装备学院复杂电子系统仿真实验室;2.清华大学计算机科学与技术)
Feedback Fuzzing Based on Improved Roulette Wheel Selection Strategy
(1.Sci.andTechnol.onComplexElectronicSystemSimulationLab.,AcademyofEquipment;2.Dept.ofComputerSci.andTechnol.,TsinghuaUniv.)
摘要
图/表
参考文献
相似文献
附件
本文已被:浏览 2399次   下载 635
投稿时间:2015-10-15    修订日期:2016-03-30
中文摘要: 为了解决传统模糊测试方法测试盲目效率低下的问题,提出一种反馈式模糊测试方法。该方法通过对传统模糊测试方法的流程进行优化来提高测试效果。通过网络爬虫收集原始样本文件,确保原始样本的多样性。通过代码覆盖率分析来从大量样本文件中筛选用于变异的最佳种子文件,在保证足够的测试空间的同时避免冗余测试。通过对种子文件进行变异来生成测试用例,并根据测试结果基于改进轮盘赌策略不断调优对种子文件的变异参数,以期发现尽可能多的软件故障。实现了一个原型系统OSSRWSFuzzer,在实验中发现了WPSOfficeforLinux软件的56个故障,其测试效果明显优于现有模糊测试工具。
Abstract:In order to solve the problem of blindness and poor efficiency of traditional fuzzing,a feedback fuzzing method was proposed.This method can improve the test effect by optimizing the process of traditional fuzzing.Firstly,original sample files were collected via a web crawler to ensure the diversity of them.Then,the best seed file was selected from a large number of sample files,to avoid redundant testing while ensuring adequate testing space.Finally,test cases were generated by mutating the seed file,and the mutation parameters was continuously adjusted according to the testing result based on improved roulette wheel selection strategy,in order to find as many software failures as possible.A prototype system named OSSRWSFuzzer was implemented,which had found 56 failures of WPS Office for Linux in experiments,and its test effect is obviously better than that of the existing fuzzers.
文章编号:201501081     中图分类号:    文献标志码:
基金项目:国家高技术研究发展计划资助项目(2012AA012902);“核高基”国家科技重大专项基金资助项目(2013ZX01045-004)
作者简介:
引用文本:
蔡军,邹鹏,沈弼龙,何骏.基于改进轮盘赌策略的反馈式模糊测试方法[J].工程科学与技术,2016,48(2):132-138.
CAI Jun,ZOU Peng,SHENG Bilong,HE Jun.Feedback Fuzzing Based on Improved Roulette Wheel Selection Strategy[J].Advanced Engineering Sciences,2016,48(2):132-138.