{"title":"有状态网络协议实现的快速模糊测试方法","authors":"Wu Biao, Tang Chaojing, Zhang Bin","doi":"10.1109/CCNS53852.2021.00023","DOIUrl":null,"url":null,"abstract":"Fuzzing the network protocol implementation is difficult. One reason for that is the randomly generated network packet data cannot satisfy strict protocol specifications to reach the next state; the other reason is that due to the interaction between server and client, executing a test case assumes a large proportion of time on synchronizing both sides. This paper proposes a fuzzer FFuzz that can speed up the execution of test cases for server fuzzing and accurately mutate specific protocol fields through semantic mutation. By changing the way of sending data packets, multiple data packets are integrated and sent to the server to reduce the interaction time and use the Fork Server mechanism to speed up the fuzzing test. Experiment shows that compared with other state-of-the-art fuzzers, this method increases the execution speed of test cases by 70%, at the same time, code coverage has also been increased by at least 2%.","PeriodicalId":142980,"journal":{"name":"2021 2nd International Conference on Computer Communication and Network Security (CCNS)","volume":"34 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2021-07-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":"{\"title\":\"FFUZZ: A Fast Fuzzing Test Method for Stateful Network Protocol Implementation\",\"authors\":\"Wu Biao, Tang Chaojing, Zhang Bin\",\"doi\":\"10.1109/CCNS53852.2021.00023\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Fuzzing the network protocol implementation is difficult. One reason for that is the randomly generated network packet data cannot satisfy strict protocol specifications to reach the next state; the other reason is that due to the interaction between server and client, executing a test case assumes a large proportion of time on synchronizing both sides. This paper proposes a fuzzer FFuzz that can speed up the execution of test cases for server fuzzing and accurately mutate specific protocol fields through semantic mutation. By changing the way of sending data packets, multiple data packets are integrated and sent to the server to reduce the interaction time and use the Fork Server mechanism to speed up the fuzzing test. Experiment shows that compared with other state-of-the-art fuzzers, this method increases the execution speed of test cases by 70%, at the same time, code coverage has also been increased by at least 2%.\",\"PeriodicalId\":142980,\"journal\":{\"name\":\"2021 2nd International Conference on Computer Communication and Network Security (CCNS)\",\"volume\":\"34 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2021-07-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2021 2nd International Conference on Computer Communication and Network Security (CCNS)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/CCNS53852.2021.00023\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2021 2nd International Conference on Computer Communication and Network Security (CCNS)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/CCNS53852.2021.00023","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
FFUZZ: A Fast Fuzzing Test Method for Stateful Network Protocol Implementation
Fuzzing the network protocol implementation is difficult. One reason for that is the randomly generated network packet data cannot satisfy strict protocol specifications to reach the next state; the other reason is that due to the interaction between server and client, executing a test case assumes a large proportion of time on synchronizing both sides. This paper proposes a fuzzer FFuzz that can speed up the execution of test cases for server fuzzing and accurately mutate specific protocol fields through semantic mutation. By changing the way of sending data packets, multiple data packets are integrated and sent to the server to reduce the interaction time and use the Fork Server mechanism to speed up the fuzzing test. Experiment shows that compared with other state-of-the-art fuzzers, this method increases the execution speed of test cases by 70%, at the same time, code coverage has also been increased by at least 2%.