关键词: 模糊测试, 符号执行, 混合测试, 调度算法, 漏洞挖掘, 约束求解, 静态分析, 距离计算

Abstract:

Hybrid fuzzy testing combines fuzzy testing and symbolic execution, uses fuzzy testing to explore the path in the program, and uses symbolic execution to solve complex constraints that are difficult to break through fuzzy testing. However, the existing hybrid fuzzy testing has not considered the task cooperation between the two technologies and the solution benefits of symbolic execution when selecting the solution target of symbolic execution. To solve these problems, a hybrid fuzzy testing method based on multivariate seed selection is proposed.The program control flow diagram is used to analyze the program state and quantify the ability of seeds to discover the path. The seeds thatare difficult to explore the new path in fuzzy testingare solved by symbolic execution, so as to form task cooperation between them. The ability to use target-point oriented ideas to quantify seed mining vulnerabilities makes symbolic execution solutions more likely to find the seeds of vulnerabilities.The experimental results show that compared with the existing hybrid fuzzy testing work, the overall path discovery number of the proposed method increases by 8.35% and the overall vulnerability discovery number increases by 28.69%.

Key words: fuzz testing, symbolic execution, hybrid testing, schedule algorithm, vulnerability mining, constraint solving, static analysis, distance calculation