摘要
模糊测试是主流的软件漏洞挖掘技术之一,在不同领域都有着广泛的应用。近年来,模糊测试用例生成技术的研究已经取得了长足的进展。首先,回顾模糊测试用例生成技术的发展历程,对相关研究工作进行分类归纳及综合对比。其次,基于模糊测试用例生成技术的深入研究,形成基于生成方式和基于变异方式的模糊测试用例生成架构。再次,对模糊测试用例生成技术进行分类,深入剖析模糊器从程序结构和语义中提取特征并结合反馈信息生成测试用例的过程。然后,从浏览器、网络协议、编译器和操作系统4个方面,对现有模糊测试用例生成技术在生成测试用例过程中面临的任务及挑战予以分类阐述,并进行系统总结和对比研究。最后,从不同角度探讨现有模糊测试用例生成技术中存在的局限性及解决方案,并展望未来具有潜力的研究方向。
Fuzzing test is one of the mainstream software vulnerability detection technologies and has been widely applied across various fields.In recent years,significant progress has been made in the research of fuzzing test case generation techniques.Firstly,this paper reviews the development of fuzzing test case generation technology,classifying and summarizing relevant research while providing a comprehensive comparison.Secondly,based on an in-depth study of fuzzing test case generation techniques,this paper establishs a framework for constructing test cases through both generation-based and mutation-based approaches.Subsequently,this paper categorizes fuzzing test case construction techniques,delving into the process by which fuzzers extract features from program structure and semantics and combine feedback information to generate test cases.Furthermore,this paper classifies and elaborates on the challenges and tasks faced by existing fuzzing test case generation techniques in four key areas:browsers,network protocols,compilers,and operating systems,followed by a systematic summary and comparative analysis.Finally,this paper discusses the limitations and potential solutions of current fuzzing test case generation techniques from multiple perspectives and outlines promising future research directions in this field.
作者
刘慧
侯同定
赵博
郭涵彬
LIU Hui;HOU Tongding;ZHAO Bo;GUO Hanbin(School of Computer and Information Engineering,Henan Normal University,Xinxiang 453007;Key Laboratory of Artificial Intelligence and Personalized Learning in Education of Henan Province,Xinxiang 453007;State Key Laboratory of Mathematical Engineering and Advanced Computing,Zhengzhou 450001;School of Cyberspace Security,PLA Strategic Support Force Information Engineering University,Zhengzhou 450001,China)
出处
《计算机工程与科学》
北大核心
2025年第7期1244-1261,共18页
Computer Engineering & Science
基金
河南省重大科技专项(221100210600)
河南省科技攻关专项(242102211094)。
关键词
模糊测试
测试用例生成
种子优化策略
漏洞挖掘
软件安全
fuzzing test
test case generation
seed optimization strategy
vulnerability mining
software security
作者简介
通信作者:赵博(1989-),男,河南郑州人,博士,讲师,研究方向为自动并行与向量化和量子计算。E-mail:zhaob07@tsinghua.org.cn,通信地址:450001河南省郑州市中国人民解放军网络空间部队信息工程大学网络空间安全学院;刘慧(1982-),女,河南焦作人,博士,副教授,研究方向为高性能计算、模糊测试和编译器优化。E-mail:liuhui@htu.edu.cn;侯同定(1998-),男,河南南阳人,硕士生,研究方向为高性能计算、模糊测试和编译器优化。E-mail:houtongding@163.com;郭涵彬(2000-),男,河南郑州人,硕士生,研究方向为高性能计算、模糊测试和编译器优化。E-mail:15838009501@163.com。
