夏飞, 宋浒, 方泉, 吉明涛, 钱柱中. 一种集成片段信息的结构化输入程序模糊测试方法[J]. 电力信息与通信技术, 2021, 19(9): 100-106. DOI: 10.16543/j.2095-641x.electric.power.ict.2021.09.014
引用本文: 夏飞, 宋浒, 方泉, 吉明涛, 钱柱中. 一种集成片段信息的结构化输入程序模糊测试方法[J]. 电力信息与通信技术, 2021, 19(9): 100-106. DOI: 10.16543/j.2095-641x.electric.power.ict.2021.09.014
XIA Fei, SONG Hu, FANG Quan, JI Mingtao, QIAN Zhuzhong. A Fuzzy Test Method for Structured Input Program Integrating Fragment Information[J]. Electric Power Information and Communication Technology, 2021, 19(9): 100-106. DOI: 10.16543/j.2095-641x.electric.power.ict.2021.09.014
Citation: XIA Fei, SONG Hu, FANG Quan, JI Mingtao, QIAN Zhuzhong. A Fuzzy Test Method for Structured Input Program Integrating Fragment Information[J]. Electric Power Information and Communication Technology, 2021, 19(9): 100-106. DOI: 10.16543/j.2095-641x.electric.power.ict.2021.09.014

一种集成片段信息的结构化输入程序模糊测试方法

A Fuzzy Test Method for Structured Input Program Integrating Fragment Information

  • 摘要: 最近提出的Zest方法可以解决一般的模糊测试方法生成输入无法通过结构化输入程序检查的问题,但是它并不能像流行的基于覆盖率引导的模糊测试系统(如AFL)一样充分利用现有的输入用例来提高测试的覆盖率。文章提出一种集成片段信息的结构化输入程序模糊测试方法Zestlet,采用片段生成器从输入用例种子集中获取片段信息,然后通过集成片段信息的参数化生成器在模糊测试时生成输入。通过测试Apache Ant、Maven和Tomcat,发现Zestlet与Zest相比总覆盖率和有效覆盖率有明显提高,而实现同样的覆盖率所需时间可减少69%~99%。

     

    Abstract: The recently proposed Zest method could solve the problem that test inputs generated by ordinary fuzzy methods often fail to pass the checks inside structured input programs. However, Zest cannot make full use of existing input cases to improve code coverage like popular coverage-guided fuzzy systems (such as AFL) do. This paper proposes Zestlet, a fuzzy test method for structured input program integrating fragment information. It uses a fragment generator to obtain fragment information from the example inputs, and then uses a parametric generator that integrates fragment information to generate inputs during fuzzy test. This paper tests Apache Ant, Maven and Tomcat and confirms that Zestlet improves both total coverage and valid coverage compared with Zest, and also reduces the time required to achieve the same coverage by 69% to 99%.

     

/

返回文章
返回