CN112363939A - Method, system and equipment for quickly generating fuzzy test network protocol template - Google Patents

Method, system and equipment for quickly generating fuzzy test network protocol template Download PDF

Info

Publication number
CN112363939A
CN112363939A CN202011264220.7A CN202011264220A CN112363939A CN 112363939 A CN112363939 A CN 112363939A CN 202011264220 A CN202011264220 A CN 202011264220A CN 112363939 A CN112363939 A CN 112363939A
Authority
CN
China
Prior art keywords
network protocol
template
generating
state data
wireshark
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202011264220.7A
Other languages
Chinese (zh)
Inventor
汪凡
万振华
王颉
董燕
李华
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shenzhen Kaiyuan Internet Security Technology Co Ltd
Original Assignee
Shenzhen Kaiyuan Internet Security Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shenzhen Kaiyuan Internet Security Technology Co Ltd filed Critical Shenzhen Kaiyuan Internet Security Technology Co Ltd
Priority to CN202011264220.7A priority Critical patent/CN112363939A/en
Publication of CN112363939A publication Critical patent/CN112363939A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/36Preventing errors by testing or debugging software
    • G06F11/3668Software testing
    • G06F11/3672Test management
    • G06F11/3684Test management for test design, e.g. generating new test cases
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/445Program loading or initiating
    • G06F9/44521Dynamic linking or loading; Link editing at or after load time, e.g. Java class loading
    • G06F9/44526Plug-ins; Add-ons

Abstract

The invention provides a method, a system, equipment and a storage medium for quickly generating a fuzzy test network protocol template, wherein the method comprises the following steps: developing a wireshark plug-in; acquiring state data of a network protocol based on a wireshark plug-in; and analyzing the state data and generating an executable fuzzy test template. The method reduces the time required for constructing the network protocol test template and improves the accuracy of constructing the network protocol test template.

Description

Method, system and equipment for quickly generating fuzzy test network protocol template
Technical Field
The invention belongs to the technical field of networks, and particularly relates to a method, a system, equipment and a storage medium for quickly generating a fuzzy test network protocol template.
Background
Fuzzy testing (fuzzy testing) is a safety testing method, fuzzy testing technology is a testing technology based on black boxes (or gray boxes), unknown bugs of products or protocols are discovered by automatically generating and executing a large number of random test cases, a complete testing template needs to be constructed on the premise of automatically generating a large number of random test cases, and for network protocols, the following problems exist in the traditional construction of testing templates:
(1) generally, a request for comments (RFC) document corresponding to a protocol needs to be viewed, and a test template is constructed according to document rules, but the method is time-consuming and labor-consuming, a complete RFC document is long in length, and a large amount of information which is not needed for constructing the template exists.
(2) The RFC document is written in english, which has a high learning cost for domestic developers, and may cause an understanding deviation due to an error in chinese-english translation, thereby causing a template construction error.
Disclosure of Invention
The technical problem to be solved by the invention is as follows: aiming at the problems in the prior art, the method for quickly generating the fuzzy test network protocol template with rapidness and correctness is provided.
In a first aspect, an embodiment of the present application provides a method for quickly generating a fuzzy test network protocol template, where the method includes:
developing a wireshark plug-in;
acquiring state data of a network protocol based on a wireshark plug-in;
and analyzing the state data and generating an executable fuzzy test template.
In a second aspect, an embodiment of the present application further provides a system for quickly generating a fuzzy test network protocol template, where the system includes:
a development module: for developing a wireshark plug-in;
an acquisition module: the system comprises a data acquisition module, a data acquisition module and a data processing module, wherein the data acquisition module is used for acquiring state data of a network protocol based on a wireshark plug-in;
an analysis module: for parsing the state data and generating an executable fuzz test template.
In a third aspect, an embodiment of the present application further provides an apparatus for quickly generating a fuzz testing network protocol template, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, where the processor, when executing the computer program, implements each step in the method for quickly generating a fuzz testing network protocol template according to the first aspect.
In a fourth aspect, the present application further provides a storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements the steps in the method for quickly generating a fuzz testing network protocol template according to the first aspect.
The method for rapidly generating the fuzzy test network protocol template provided by the embodiment of the application comprises the following steps: developing a wireshark plug-in; acquiring state data of a network protocol based on a wireshark plug-in; and analyzing the state data and generating an executable fuzzy test template. The method reduces the time required for constructing the network protocol test template and improves the accuracy of constructing the network protocol test template.
Drawings
The detailed structure of the invention is described in detail below with reference to the accompanying drawings
FIG. 1 is a flow chart illustrating a method for rapidly generating a fuzzy test network protocol template according to the present invention;
FIG. 2 is a block diagram of a program for fast generation of fuzzy test network protocol templates according to the present invention.
Detailed Description
In order to make the objects, features and advantages of the present invention more obvious and understandable, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is apparent that the described embodiments are only a part of the embodiments of the present invention, and not all the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Fig. 1 is a schematic flowchart of a method for quickly generating a fuzzy test network protocol template in an embodiment of the present application, where in this embodiment, the method for quickly generating a fuzzy test network protocol template includes:
and step 101, developing a wireshark plug-in.
Among them, Wireshark (ethernet) is a network packet analysis software. The function of the network packet analysis software is to capture the network packets and display the most detailed network packet data as possible. Wireshark uses WinPCAP as an interface and directly exchanges data messages with the network card.
And 102, acquiring the state data of the network protocol based on the wireshark plug-in.
In which, by developing the wireshark plug-in, it can obtain various state information requested by a certain network protocol, and utilize the state information.
And 103, analyzing the state data and generating an executable fuzzy test template.
The state data acquired by the wireshark plug-in the step 102 is analyzed, so that the executable fuzz test template can be quickly generated, and the template is constructed according to different state information of the real request protocol, so that the accuracy of the template is higher than that of the traditional mode.
The method for rapidly generating the fuzzy test network protocol template provided by the embodiment of the application comprises the following steps: developing a wireshark plug-in; acquiring state data of a network protocol based on a wireshark plug-in; and analyzing the state data and generating an executable fuzzy test template. The method shortens the time required for constructing the network protocol test template and improves the accuracy of constructing the network protocol test template.
Specifically, the state data of the network protocol acquired based on the wireshark plug-in at least comprises K-V data. The K-V (Key-Value) database is a database for storing data in Key Value pairs, and like a map in Java, the whole database can be understood as a large map, and each Key corresponds to a unique Value.
More specifically, parsing the state data includes parsing the values of K and V, i.e., key is a key and value is a value.
Specifically, after the state data is analyzed and the executable fuzz test template is generated, the test is executed according to the version of the executable fuzz test template. After the state data is analyzed, the template constructed by different information of the real request protocol can be obtained, and the test can be executed after the version of the fuzzy test template is obtained.
Further, an embodiment of the present application further provides an apparatus 200 for rapidly generating a fuzzy test network protocol template, referring to fig. 2, where fig. 2 is a schematic block diagram of the apparatus for rapidly generating a fuzzy test network protocol template in the embodiment of the present application, and in the embodiment of the present application, the apparatus 200 for rapidly generating a fuzzy test network protocol template includes:
the development module 201: for developing a wireshark plug-in;
the acquisition module 202: the system comprises a data acquisition module, a data acquisition module and a data processing module, wherein the data acquisition module is used for acquiring state data of a network protocol based on a wireshark plug-in;
the analysis module 203: for parsing the state data and generating an executable fuzz test template.
The device 200 for rapidly generating the fuzzy test network protocol template provided by the embodiment of the application can realize that: developing a wireshark plug-in; acquiring state data of a network protocol based on a wireshark plug-in; and analyzing the state data and generating an executable fuzzy test template. The method reduces the time required for constructing the network protocol test template and improves the accuracy of constructing the network protocol test template.
Further, an embodiment of the present application further provides an apparatus for rapidly generating a fuzz testing network protocol template, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, where when the processor executes the computer program, each step in the above method for rapidly generating a fuzz testing network protocol template is implemented.
Further, the present application also provides a storage medium, on which a computer program is stored, and the computer program, when being executed by a processor, implements the steps in the method for rapidly generating the fuzzy test network protocol template as described above.
Each functional module in the embodiments of the present invention may be integrated into one processing module, or each module may exist alone physically, or two or more modules are integrated into one module. The integrated module can be realized in a hardware mode, and can also be realized in a software functional module mode. The integrated module, if implemented in the form of a software functional module and sold or used as a separate product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and other various media capable of storing program codes.
It should be noted that, for the sake of simplicity, the above-mentioned method embodiments are described as a series of acts or combinations, but those skilled in the art should understand that the present invention is not limited by the described order of acts, as some steps may be performed in other orders or simultaneously according to the present invention. Further, those skilled in the art will appreciate that the embodiments described in the specification are presently preferred and that no acts or modules are necessarily required of the invention.
In the above embodiments, the descriptions of the respective embodiments have respective emphasis, and for parts that are not described in detail in a certain embodiment, reference may be made to related descriptions of other embodiments.
In view of the above description of the method, system, device and storage medium for fast generating a fuzzy test network protocol template provided by the present invention, those skilled in the art may change the specific implementation manner and application scope according to the idea of the embodiment of the present application, and in summary, the content of the present specification should not be construed as limiting the present invention.

Claims (7)

1. A method for rapidly generating a fuzzy test network protocol template, the method comprising:
developing a wireshark plug-in;
acquiring state data of a network protocol based on a wireshark plug-in;
and analyzing the state data and generating an executable fuzzy test template.
2. The method of claim 1, wherein the state data includes at least K-V data.
3. The method of claim 2, wherein the parsing the state data and generating an executable fuzz test template comprises:
the values of K and V were analyzed.
4. The method of claim 3, wherein the parsing the state data and generating an executable fuzz test template comprises:
and executing the test according to the executable fuzz test version.
5. A system for rapidly generating a fuzz testing network protocol template, the system comprising:
a development module: for developing a wireshark plug-in;
an acquisition module: the system comprises a data acquisition module, a data acquisition module and a data processing module, wherein the data acquisition module is used for acquiring state data of a network protocol based on a wireshark plug-in;
an analysis module: for parsing the state data and generating an executable fuzz test template.
6. An apparatus for fast generation of fuzz testing network protocol templates, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that the processor implements the steps of the method for fast generation of fuzz testing network protocol templates according to any of claims 1 to 4 when executing the computer program.
7. A storage medium having stored thereon a computer program, wherein the computer program, when executed by a processor, implements the steps of the method for fast generation of a fuzz testing network protocol template according to any of claims 1 to 4.
CN202011264220.7A 2020-11-12 2020-11-12 Method, system and equipment for quickly generating fuzzy test network protocol template Pending CN112363939A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011264220.7A CN112363939A (en) 2020-11-12 2020-11-12 Method, system and equipment for quickly generating fuzzy test network protocol template

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011264220.7A CN112363939A (en) 2020-11-12 2020-11-12 Method, system and equipment for quickly generating fuzzy test network protocol template

Publications (1)

Publication Number Publication Date
CN112363939A true CN112363939A (en) 2021-02-12

Family

ID=74514982

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011264220.7A Pending CN112363939A (en) 2020-11-12 2020-11-12 Method, system and equipment for quickly generating fuzzy test network protocol template

Country Status (1)

Country Link
CN (1) CN112363939A (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113055408A (en) * 2021-05-27 2021-06-29 航天中认软件测评科技(北京)有限责任公司 Network security test integrated device
CN113709126A (en) * 2021-08-18 2021-11-26 深圳开源互联网安全技术有限公司 Network protocol security fuzzy test method, device, equipment and storage medium

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102087631A (en) * 2011-03-09 2011-06-08 中国人民解放军国发科学技术大学 Method for realizing fuzzing of software on the basis of state protocol
CN103198009A (en) * 2012-01-04 2013-07-10 中国移动通信集团公司 Universal testing method, system and corresponding device
CN106407102A (en) * 2015-08-03 2017-02-15 腾讯科技(深圳)有限公司 A fuzz testing method, device and system for application programs
CN106484611A (en) * 2015-09-02 2017-03-08 腾讯科技(深圳)有限公司 Fuzz testing method and apparatus based on automation protocol adaptation
CN109086197A (en) * 2017-06-14 2018-12-25 上海申通地铁集团有限公司 The acceptance testing method and system of urban track traffic CBTC system

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102087631A (en) * 2011-03-09 2011-06-08 中国人民解放军国发科学技术大学 Method for realizing fuzzing of software on the basis of state protocol
CN103198009A (en) * 2012-01-04 2013-07-10 中国移动通信集团公司 Universal testing method, system and corresponding device
CN106407102A (en) * 2015-08-03 2017-02-15 腾讯科技(深圳)有限公司 A fuzz testing method, device and system for application programs
CN106484611A (en) * 2015-09-02 2017-03-08 腾讯科技(深圳)有限公司 Fuzz testing method and apparatus based on automation protocol adaptation
CN109086197A (en) * 2017-06-14 2018-12-25 上海申通地铁集团有限公司 The acceptance testing method and system of urban track traffic CBTC system

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
NATSUMI: "Lua编写Wireshark插件实战", 《HTTPS://WWW.JIANSHU.COM/P/1E2F63A484D6》 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113055408A (en) * 2021-05-27 2021-06-29 航天中认软件测评科技(北京)有限责任公司 Network security test integrated device
CN113709126A (en) * 2021-08-18 2021-11-26 深圳开源互联网安全技术有限公司 Network protocol security fuzzy test method, device, equipment and storage medium

Similar Documents

Publication Publication Date Title
CN109800258B (en) Data file deployment method, device, computer equipment and storage medium
US10135936B1 (en) Systems and methods for web analytics testing and web development
US9529662B1 (en) Dynamic rule-based automatic crash dump analyzer
US7801719B2 (en) Processor-based system analysis automation
CN103853650A (en) Test case generating method and device for fuzz testing
CN111813701B (en) HTTP-based interface testing method and device, computer equipment and storage medium
CN112363939A (en) Method, system and equipment for quickly generating fuzzy test network protocol template
CN110955409B (en) Method and device for creating resources on cloud platform
Jiang et al. Assuring the model evolution of protocol software specifications by regression testing process improvement
CN111324894A (en) XSS vulnerability detection method and system based on web application security
CN113742231A (en) Protobuf protocol dynamic analysis-based number making method and device
CN111078529B (en) Client writing module testing method and device and electronic equipment
CN115470152B (en) Test code generation method, test code generation device, and storage medium
US9274910B2 (en) Automatic test map generation for system verification test
CN112699042B (en) Unit test case generation method and device
CN113590217A (en) Function management method and device based on engine, electronic equipment and storage medium
CN113672233A (en) Server out-of-band management method, device and equipment based on Redfish
CN111737090A (en) Log simulation method and device, computer equipment and storage medium
CN114510409A (en) Application program code detection method and computer readable storage medium
CN115168673B (en) Data graphical processing method, device, equipment and storage medium
CN112799956B (en) Asset identification capability test method, device and system device
Kogel et al. Learning Mealy Machines with Local Timers
CN117171800B (en) Sensitive data identification method and device based on zero trust protection system
CN114218098A (en) Software system testing method and device, computer equipment and readable storage medium
CN109901990B (en) Method, device and equipment for testing service system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20210212

RJ01 Rejection of invention patent application after publication