CN111913877A - Fuzzy test method and device for text configuration file - Google Patents

Abstract

Embodiments of the present invention provide a text configuration file-oriented fuzzing testing method and device, the method comprising: identifying a text file format type of the target configuration file, and determining a key-value pair of the target configuration file; Perform a pre-fuzzing test on the program that takes the target configuration file as input to detect whether the program has loopholes in the format, and extract all visible strings in the program, and the key-value pairs of the target configuration file are The key in the key combination seed file is mutated to obtain a key combination seed file; based on the weight of the key in the key combination seed file, the value corresponding to the key in the key combination seed file is mutated to obtain a new combination seed file. bugs in the program. The embodiment of the present invention realizes the comprehensive mining of deeper-level loopholes in the program, and improves the efficiency of fuzzy testing oriented to text configuration files.

Description

A text configuration file-oriented fuzzy testing method and device

technical field

The invention relates to the field of vulnerability mining and analysis, in particular to a text configuration file-oriented fuzzy testing method and device.

Background technique

Fuzzing is a technique for exploiting vulnerabilities in software or systems in a dynamic manner. The fuzzing tool is represented by AFL, and its concept is dynamic execution and path coverage improvement. The general implementation method is to use the seed file as input to actually execute the test program, and at the same time record the execution path corresponding to each seed file by instrumentation, and then Attempts to mutate the seed file to try to make the mutated seed file as input to the program allow the program to go through different execution paths.

In the prior art of fuzzing testing, the input types are often diverse, which can be network data input through sockets, or read input from program command line parameters, or directly from the program's configuration file. Read input. But the same fuzzing method, namely mutation algorithm, is not efficient and coverage enough for fuzzing different types of input programs.

Therefore, how to implement a fuzzing method oriented to text configuration files and improve the efficiency and coverage of fuzzing testing oriented to text configuration files has become an urgent problem to be solved.

SUMMARY OF THE INVENTION

Aiming at the defects in the prior art, the embodiments of the present invention provide a text configuration file-oriented fuzzing testing method and apparatus.

In a first aspect, an embodiment of the present invention provides a text configuration file-oriented fuzzing testing method, including:

Get the target configuration file in text file format;

Identify the text file format type of the target configuration file, and determine the key-value key-value pair of the target configuration file;

pre-fuzzing a program with the target configuration file as input to detect whether the program has a format vulnerability, and extracting all visible strings in the program;

Using the visible string, mutate the key in the key-value pair of the target configuration file to obtain a key combination seed file;

Based on the weight of the key in the key combination seed file, mutate the value corresponding to the key in the key combination seed file to obtain a new combination seed file;

Use the new combined seed file to mine the program for vulnerabilities.

Optionally, the use of the visible string to mutate the key in the key-value pair of the target configuration file to obtain a key combination seed file, specifically including:

For each of the visible strings, replace the key in the key-value pair with the current visible string to obtain a seed file, and execute the seed file as an input instrumentation. If a new execution path is generated, then The key is stored in a valid key set;

Based on the valid key set, any one of the operations of deleting, replacing and adding keys in the seed file is randomly performed in sequence to obtain a key combination seed file.

Optionally, based on the weight of the key in the key combination seed file, mutate the value corresponding to the key in the key combination seed file to obtain a new combined seed file, specifically including:

The value corresponding to each key in the key combination seed file is mutated. If it is determined that a new execution path is generated after the execution of the instrumentation, the weight of the corresponding key is set according to the number of new code blocks generated in the new execution path. ;

M keys are randomly selected from the top N keys with high weights, and the values corresponding to the M keys are mutated. If it is judged that a new execution path is generated after the execution of the instrumentation, the value of the M keys is increased at the same time. Weight, or, if it is judged that no new execution path is generated after the instrumentation is executed, the weights of the M keys are reduced at the same time, and if there are P keys in the M keys, the weights of P keys are lower than the top N with high weights The weight of the key, then randomly select M keys from the top N keys with high weights, until the weight of the M keys is not greater than the weight threshold, and obtain a new combined seed file;

Among them, N, M and P are all natural numbers greater than or equal to 1, and N≥M≥P.

Optionally, mutating the value corresponding to the key in the key combination seed file specifically includes:

Execute the following steps in a loop for a preset number of times: randomly select an operation strategy to mutate the values corresponding to the Q keys in the key combination seed file;

The preset number of times is determined according to the data length of the value corresponding to the key; the operation strategy includes bitwise flip, integer addition and subtraction, data insertion and data deletion; Q is a natural number greater than or equal to 1.

In a second aspect, an embodiment of the present invention provides a text configuration file-oriented fuzzing test device, including:

Get module, used to get the target configuration file in text file format;

An identification module for identifying the text file format type of the target configuration file, and determining the key-value key-value pair of the target configuration file;

A detection and extraction module, configured to perform a pre-fuzzing test on a program that takes the target configuration file as an input to detect whether the program has a format loophole, and extract all visible strings in the program;

The key mutation module is used to mutate the key in the key-value pair of the target configuration file by using the visible string to obtain a key combination seed file;

The value mutation module is used to mutate the value corresponding to the key in the key combination seed file based on the weight of the key in the key combination seed file to obtain a new combination seed file;

The mining module is used for mining the vulnerabilities of the program by using the new combined seed file.

Optionally, the sampling frequency in the time window is set fixedly, and is at least twice the effective value of the frequency of the electromyography signal.

Optionally, the key mutation module is specifically used for:

For each of the visible strings, replace the key in the key-value pair with the current visible string to obtain a seed file, and execute the seed file as an input instrumentation. If a new execution path is generated, then The key is stored in a valid key set;

Based on the valid key set, any one of the operations of deleting, replacing and adding keys in the seed file is randomly performed in sequence to obtain a key combination seed file.

Optionally, the value mutation module is specifically used for:

The value corresponding to each key in the key combination seed file is mutated. If it is determined that a new execution path is generated after the execution of the instrumentation, the weight of the corresponding key is set according to the number of new code blocks generated in the new execution path. ;

M keys are randomly selected from the top N keys with high weights, and the values corresponding to the M keys are mutated. If it is judged that a new execution path is generated after the execution of the instrumentation, the value of the M keys is increased at the same time. Weight, or, if it is judged that no new execution path is generated after the instrumentation is executed, the weights of the M keys are reduced at the same time, and if there are P keys in the M keys, the weights of P keys are lower than the top N with high weights The weight of the key, then randomly select M keys from the top N keys with high weights, until the weight of the M keys is not greater than the weight threshold, and obtain a new combined seed file;

Among them, N, M and P are all natural numbers greater than or equal to 1, and N≥M≥P.

Optionally, the value mutation module is also specifically used for:

Execute the following steps in a loop for a preset number of times: randomly select an operation strategy to mutate the values corresponding to the Q keys in the key combination seed file;

The preset number of times is determined according to the data length of the value corresponding to the key; the operation strategy includes bitwise flip, integer addition and subtraction, data insertion and data deletion; Q is a natural number greater than or equal to 1.

Third aspect An embodiment of the present invention provides an electronic device, including a memory, a processor, and a computer program stored in the memory and running on the processor, the processor implementing the above-mentioned first aspect when the program is executed. The steps of a textual profile-oriented fuzzing approach.

Fourth aspect An embodiment of the present invention provides a non-transitory computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, implements the text configuration file-oriented fuzzing method described in the first aspect above A step of.

The embodiment of the present invention provides a text configuration file-oriented fuzzing testing method. In the method, a new combined seed file is obtained by performing pre-fuzzing testing, key mutation and value mutation on a program that takes a target configuration file in text file format as input , and perform fuzz testing, which can comprehensively dig deeper loopholes in the program and improve the efficiency of fuzz testing oriented to text configuration files.

Description of drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description These are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained according to these drawings without creative efforts.

1 is a schematic flowchart of a text configuration file-oriented fuzzing testing method provided by an embodiment of the present invention;

2 is a schematic flowchart of another text configuration file-oriented fuzzing testing method provided by an embodiment of the present invention;

3 is a schematic structural diagram of a text configuration file-oriented fuzzing test device provided by an embodiment of the present invention;

FIG. 4 is a schematic diagram of a physical structure of an electronic device according to an embodiment of the present invention.

Detailed ways

In order to make the purposes, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments These are some embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

1 is a schematic flowchart of a method for multiplexing an ECG electrode into a button provided by an embodiment of the present invention, and FIG. 2 is a schematic flowchart of another method for multiplexing an ECG electrode into a button provided by an embodiment of the present invention, as shown in FIG. 1 and 2, the method includes:

S101: Obtain a target configuration file in a text file format.

The format of the target configuration file generally includes a binary file format (including invisible characters and a unique file structure), a text file format (all visible characters), and a database format (stored in a database file). The text file format is generally divided into three types, including key-value pair format, json format and XML format.

Specifically, the embodiment of the present invention is directed to software or services that need to use a target configuration file in a text format. First, the target configuration file in a text file format is obtained.

S102: Identify the text file format type of the target configuration file, and determine a key-value key-value pair of the target configuration file.

Specifically, the type of text file format used to identify the target configuration file is key-value pair, json or XML.

For the key-value pair format type, in the general file, the left side of each line is an identifier as the key, the middle is connected by "=", and the right side is the value corresponding to the key.

For the json format, the main body is usually wrapped with "{" and "}", and the key and value are wrapped in quotation marks and separated by ":".

For the XML format, the body is an XML tag, and the key is used as the tag name and the value is used as the tag value, or the key and value are directly used as tag attributes and separated by "=".

For the text file format type of key-value pair, json or XML, determine the key-value key-value pair of the target configuration file, and locate the positions of the key and value.

S103: Perform a pre-fuzzing test on a program that takes the target configuration file as an input to detect whether the program has a format loophole, and extract all visible strings in the program.

Wherein, the pre-fuzzing test is to use the fuzzing tool AFL to perform a preliminary fuzzing test on the program, so as to dig out the loopholes when the format of the target configuration file is wrong.

Specifically, first, use the fuzzing tool AFL to perform a pre-fuzzing test on the program that takes the target configuration file as input to detect whether the program has a format vulnerability, and then identify all the programs from the .data segment of the program through traversal. The visible strings of the After the string, replace all visible end-of-string characters with "\0".

Steps S101-S103 are preprocessing of the target configuration file in text file format.

S104: Using the visible character string, mutate the key in the key-value pair of the target configuration file to obtain a key combination seed file.

Specifically, replace the key in the target configuration file with the visible string extracted from the preprocessing of the target configuration file in text file format, or directly add a new key-value pair in the target configuration file, or directly delete the target configuration file The key in the key, and then perform the instrumentation execution judgment to obtain the key combination seed file.

The instrumentation execution is to insert a probe into the program under test, and then obtain the control flow and data flow information of the program through the execution of the probe, so as to achieve the purpose of testing. It should be noted that the embodiment of the present invention does not perform byte mutation on the key itself, because if only the key byte itself mutates, there is a vulnerability that can generally be found in the pre-fuzzing test, and if the key is wrong in the subsequent test, it will often lead to the target. The configuration file parsing fails, adding a lot of useless torrent files, which greatly reduces the test efficiency.

S105: Based on the weight of the key in the key combination seed file, mutate the value corresponding to the key in the key combination seed file to obtain a new combined seed file.

Specifically, the key combination seed file determined in step S104 is obtained, and then according to the weight of the key in the key combination seed file, the value corresponding to the key in the key combination seed file is mutated, and the instrumentation execution judgment is performed to obtain New combined seed file. It should be noted that the key will determine the function executed during parsing, and the value is often used as the execution parameter of the function.

S106: Use the new combined seed file to mine the loopholes of the program.

A fuzz test is performed on the program using the new combined seed file obtained in step S105 as an input, and deeper-level loopholes in the program are excavated.

The embodiment of the present invention provides a text configuration file-oriented fuzzing testing method. In the method, a new combined seed file is obtained by performing pre-fuzzing testing, key mutation and value mutation on a program that takes a target configuration file in text file format as input After fuzzing testing, it can comprehensively dig deeper loopholes in the program and improve the efficiency of fuzzing testing oriented to text configuration files.

Further, on the basis of the above embodiments of the invention, the use of the visible string to mutate the key in the key-value pair of the target configuration file to obtain a key combination seed file specifically includes:

For each of the visible strings, replace the key in the key-value pair with the current visible string to obtain a seed file, and execute the seed file as an input instrumentation. If a new execution path is generated, then The key is stored in a valid key set;

Based on the valid key set, any one of the operations of deleting, replacing and adding keys in the seed file is randomly performed in sequence to obtain a key combination seed file.

Specifically, first, use the visible strings extracted in the preprocessing to replace the keys in the key-value pair in the target configuration file one by one. After each key is replaced, a seed file is obtained, and the seed is used as the input program to instrument and execute. , if a new execution path is generated, the replaced visible string is likely to be a valid key, then the key is stored in the valid key set, and then the final valid key set is extracted.

Then, any one of the operations of deleting, replacing and adding keys in the seed file is randomly performed in sequence, and finally, a key combination seed file is obtained. For the replacement key operation, you can directly replace the key position located in the preprocessing with the new key.

When the text file format type used by the target configuration file is key-value pair, the operation of adding or deleting key-value pair is to directly match the corresponding key-value line with the format of "key=value" to add or delete it.

When the text file format type used by the target configuration file is json, the operation of adding and deleting key-value pairs is to directly match the corresponding key-value items in the format of '"key":"value"' to add or delete them.

When the text file format type used by the target configuration file is XML, to add or delete a key-value pair, you need to first identify the label where the key-value pair is located, and directly add or delete the entire label; if the key-value is used as a label If the attribute is stored in the tag, and the tag has other attributes, only the tag attribute will be added or deleted without adding or deleting the tag; if the tag has no other attributes, the entire tag will be added or deleted.

The embodiment of the present invention provides a fuzzing test method oriented to a text configuration file. In the method, based on the valid key set, the keys in the seed file are randomly deleted, replaced and added in sequence. , mutate the key to obtain the key combination seed file, which can more comprehensively mine the loopholes in the program and improve the fuzzing efficiency for text configuration files.

Further, on the basis of the above-mentioned embodiments of the invention, the value corresponding to the key in the key combination seed file is mutated based on the weight of the key in the key combination seed file to obtain a new combination seed file, specifically: include:

The value corresponding to each key in the key combination seed file is mutated. If it is determined that a new execution path is generated after the execution of the instrumentation, the weight of the corresponding key is set according to the number of new code blocks generated in the new execution path. ;

M keys are randomly selected from the top N keys with high weights, and the values corresponding to the M keys are mutated. If it is judged that a new execution path is generated after the execution of the instrumentation, the value of the M keys is increased at the same time. Weight, or, if it is judged that no new execution path is generated after the instrumentation is executed, the weights of the M keys are reduced at the same time, and if there are P keys in the M keys, the weights of P keys are lower than the top N with high weights The weight of the key, then randomly select M keys from the top N keys with high weights, until the weight of the M keys is not greater than the weight threshold, and obtain a new combined seed file;

Among them, N, M and P are all natural numbers greater than or equal to 1, and N≥M≥P.

Specifically, after the key combination seed file is obtained, first, according to the weight of the key in the key combination seed file, the value corresponding to the key in the key combination seed file is mutated one by one. When a new execution path is generated when the stub is executed, the weight of the corresponding key is set according to the number of new code blocks generated in the new execution path. For example, the values of the original 3 keys are [1, 2, 3], first mutate the value of the first key to obtain [xxxx, 2, 3], and then keep the original value of the first key, and for the second key The value of the key is mutated to get [1, xxxxx, 3], and finally the value of the third key is mutated to get [1, 2, xxxxxxx], and the weight of the corresponding key is set according to the number of new code blocks in the new execution path. The added code block is also compared with the path of the initial value[1,2,3], and each new code block added corresponds to the key weight +1. It should be noted that, in order to show the difference, use xxxx to represent the mutated value of the first key, use xxxxx to represent the mutated value of the second key, and use xxxxxxx to represent the mutated value of the third key value, there is no association between xxxx, xxxxx, and xxxxxxx.

Then, randomly select M keys from the top N keys with high weights, and mutate the values corresponding to the M keys. If it is judged that a new execution path is generated when the mutated seed file is instrumented and executed, then At the same time, increase the weights of the M keys, or, if it is judged that no new execution path is generated when the mutated seed file is inserted and executed, then reduce the weights of the M keys at the same time. There are P keys whose weights are lower than the weights of the top N keys with high weights, and then M keys are randomly selected from the top N keys with high weights until the weights of the M keys are not greater than the weights. Threshold to get the new combined seed file. For example, after setting the weight of the corresponding key, randomly select 5 keys from 10 keys with high weights, and mutate their values at the same time. When a new path appears, the weights of the five keys are all increased by the number of new code blocks; when no new paths appear, the weights of the five keys are all reduced by 1 (the new path here is based on all previous paths, and the purpose is to change tend to explore previously untrodden paths). When the weight of 2 keys in the selected 5 keys is lower than the top 10, then 5 key variants are re-selected from the top 10 keys, and the above process is repeated. When all key weights become 1, the value mutation of this key combination ends, and a new combination seed file is obtained. When a new execution path does not appear after multiple value mutations, reselect the key combination seed file.

The embodiment of the present invention provides a text configuration file-oriented fuzzing test method. In the method, the weight of the corresponding key is set according to the number of new code blocks generated in the new execution path, and the weight of the first N keys with high weight is selected from the key. Randomly select M keys, adjust the weights of M keys according to the new execution path, so that they are not greater than the weight threshold, mutate the value, and obtain a new combined seed file, which can dig deeper loopholes in the program and improve the orientation Fuzzing efficiency for text configuration files.

Further, on the basis of the above embodiments of the invention, the variation of the value corresponding to the key in the key combination seed file specifically includes:

Execute the following steps in a loop for a preset number of times: randomly select an operation strategy to mutate the values corresponding to the Q keys in the key combination seed file;

The preset number of times is determined according to the data length of the value corresponding to the key; the operation strategy includes bitwise flip, integer addition and subtraction, data insertion and data deletion; Q is a natural number greater than or equal to 1.

Specifically, the value corresponding to the key in the key combination seed file is mutated, and the details are cyclically executing the following steps for a preset number of times: randomly select an operation strategy to perform the value corresponding to the Q keys in the key combination seed file. Mutation; the operation strategies include bit-wise flipping, integer addition and subtraction, data insertion and data deletion. For example, some bits of the value will be randomly flipped during mutation, random integers will be added or subtracted to random bytes, random big-endian or little-endian random integers will be added or subtracted to random words, and random double words will be added or subtracted by random big-endian order. Add or subtract random integers in endian or little-endian order, add or subtract random integers in random big-endian or little-endian order for random words, and select random positions to insert random length data. 80% of the content comes from the value itself, and 20% of the content is random. Generate and choose random locations to delete random length data. The loop randomly selects a strategy from the above 7 strategies to mutate, and the preset number of loops is set to the data length of value * (a random number between 1 and 2).

The embodiment of the present invention provides a fuzzing test method oriented to a text configuration file. In the method, a random selection of an operation strategy is used to mutate the values corresponding to multiple keys in the key combination seed file, and cyclically execute a preset number of times, It can dig deeper loopholes in the program and improve the fuzzing efficiency for text configuration files.

FIG. 3 is a schematic structural diagram of a text configuration file-oriented fuzzing test device provided by an embodiment of the present invention. As shown in FIG. 3 , the device includes:

an obtaining module 301 for obtaining a target configuration file in a text file format;

An identification module 302, configured to identify the text file format type of the target configuration file, and determine the key-value key-value pair of the target configuration file;

A detection and extraction module 303, configured to perform a pre-fuzzing test on a program that takes the target configuration file as an input to detect whether the program has a format loophole, and extract all visible strings in the program;

The key mutation module 304 is used to mutate the key in the key-value pair of the target configuration file by using the visible string to obtain a key combination seed file;

The value mutation module 305 is configured to mutate the value corresponding to the key in the key combination seed file based on the weight of the key in the key combination seed file to obtain a new combination seed file;

The mining module 306 is configured to use the new combined seed file to mine the loopholes of the program.

The text configuration file-oriented fuzzing testing apparatus is used to implement the textual configuration file-oriented fuzzing testing methods provided by the foregoing method embodiments. Therefore, the descriptions and definitions in the foregoing method embodiments can be used for the understanding of each execution module in the text configuration file-oriented fuzzing testing apparatus provided in the embodiments of the present invention, and details are not repeated here.

An embodiment of the present invention provides a text configuration file-oriented fuzz testing device, in which a new combined seed file is obtained by performing pre-fuzzing testing, key mutation and value mutation on a program that takes a target configuration file in text file format as input , and perform fuzz testing, which can comprehensively dig deeper loopholes in the program and improve the efficiency of fuzz testing oriented to text configuration files.

Further, on the basis of the above embodiments of the invention, the key mutation module is specifically used for:

For each of the visible strings, replace the key in the key-value pair with the current visible string to obtain a seed file, and execute the seed file as an input instrumentation. If a new execution path is generated, then The key is stored in a valid key set;

Based on the valid key set, any one of the operations of deleting, replacing and adding keys in the seed file is randomly performed in sequence to obtain a key combination seed file.

Further, on the basis of the above embodiments of the invention, the value variation module is specifically used for:

The value corresponding to each key in the key combination seed file is mutated. If it is determined that a new execution path is generated after the execution of the instrumentation, the weight of the corresponding key is set according to the number of new code blocks generated in the new execution path. ;

M keys are randomly selected from the top N keys with high weights, and the values corresponding to the M keys are mutated. If it is judged that a new execution path is generated after the execution of the instrumentation, the value of the M keys is increased at the same time. Weight, or, if it is judged that no new execution path is generated after the instrumentation is executed, the weights of the M keys are reduced at the same time, and if there are P keys in the M keys, the weights of P keys are lower than the top N with high weights The weight of the key, then randomly select M keys from the top N keys with high weights, until the weight of the M keys is not greater than the weight threshold, and obtain a new combined seed file;

Among them, N, M and P are all natural numbers greater than or equal to 1, and N≥M≥P.

Further, the value mutation module is specifically also used for:

Execute the following steps in a loop for a preset number of times: randomly select an operation strategy to mutate the values corresponding to the Q keys in the key combination seed file;

The preset number of times is determined according to the data length of the value corresponding to the key; the operation strategy includes bitwise flip, integer addition and subtraction, data insertion and data deletion; Q is a natural number greater than or equal to 1.

FIG. 4 illustrates a schematic diagram of the physical structure of an electronic device. As shown in FIG. 4 , the electronic device may include: a processor (Processor) 401, a memory (Memory) 402, a communication interface (Communications Interface) 403 and a communication bus 404, The processor 401 , the memory 402 , and the communication interface 403 communicate with each other through the communication bus 404 . The processor 401 can call the logic instructions in the memory 402 to execute the methods provided by the above method embodiments, for example, the method includes: obtaining a target configuration file in a text file format; identifying the text file format type of the target configuration file, and determining The key-value key-value pair of the target configuration file; perform pre-fuzzing on the program that takes the target configuration file as input to detect whether the program has a format vulnerability, and extract all visible characters in the program string; use the visible string to mutate the key in the key-value pair of the target configuration file to obtain a key combination seed file; based on the weight of the key in the key combination seed file, the key combination seed The value corresponding to the key in the file is mutated to obtain a new combined seed file; the new combined seed file is used to mine the loopholes of the program.

In addition, the above-mentioned logic instructions in the memory 402 can be implemented in the form of software functional units and can be stored in a computer-readable storage medium when sold or used as an independent product. Based on this understanding, the technical solution of the present invention can be embodied in the form of a software product in essence, or the part that contributes to the prior art or the part of the technical solution. The computer software product is stored in a storage medium, including Several instructions are used to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, Read-Only Memory (ROM, Read-Only Memory), Random Access Memory (RAM, Random Access Memory), magnetic disk or optical disk and other media that can store program codes .

Embodiments of the present invention further provide a non-transitory computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, is implemented to execute the methods provided by the foregoing method embodiments, for example, including: obtaining a text file format the target configuration file; identify the text file format type of the target configuration file, and determine the key-value key-value pair of the target configuration file; perform a pre-fuzzing test on the program that takes the target configuration file as input to detect all Check whether the program has a format loophole, and extract all visible strings in the program; use the visible strings to mutate the key in the key-value pair of the target configuration file to obtain a key combination seed file ; Based on the weight of the key in the key combination seed file, mutate the value corresponding to the key in the key combination seed file to obtain a new combination seed file; Use the new combination seed file to mine the loopholes of the program .

The device embodiments described above are only illustrative, wherein the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in One place, or it can be distributed over multiple network elements. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution in this embodiment. Those of ordinary skill in the art can understand and implement it without creative effort.

From the description of the above embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus a necessary general hardware platform, and certainly can also be implemented by hardware. Based on this understanding, the above-mentioned technical solutions can be embodied in the form of software products in essence or the parts that make contributions to the prior art, and the computer software products can be stored in computer-readable storage media, such as ROM/RAM, magnetic A disc, an optical disc, etc., includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform the methods described in various embodiments or some parts of the embodiments.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, but not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that it can still be The technical solutions described in the foregoing embodiments are modified, or some technical features thereof are equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims (10)

1. A fuzzy test method for text configuration files is characterized by comprising the following steps:

acquiring a target configuration file in a text file format;

identifying the text file format type of the target configuration file, and determining a key value-value pair of the target configuration file;

performing pre-fuzzy test on a program taking the target configuration file as input to detect whether the program has a format bug, and extracting all visible character strings in the program;

utilizing the visible character string to perform variation on a key in a key-value pair of the target configuration file to obtain a key combination seed file;

based on the weight of the key in the key combination seed file, carrying out variation on the value corresponding to the key in the key combination seed file to obtain a new combination seed file;

and utilizing the new combined seed file to mine the vulnerability of the program.

2. The fuzzy test method for the text configuration file according to claim 1, wherein the varying the key in the key-value pair of the target configuration file by using the visible character string to obtain a key combination seed file specifically comprises:

for each visible character string, replacing a key in the key-value pair with the current visible character string to obtain a seed file, executing the seed file as an input instrumentation, and storing the key to an effective key set if a new execution path is generated;

and based on the effective key set, randomly deleting, replacing and adding any one of the keys in the seed file in sequence to obtain a key combination seed file.

3. The fuzzy test method for the text configuration file according to claim 1, wherein the varying the value corresponding to the key in the key combination seed file based on the weight of the key in the key combination seed file to obtain a new combination seed file specifically comprises:

the value corresponding to each key in the key combination seed file is subjected to variation, and if a new execution path is generated after the instrumentation is judged, the weight corresponding to the key is set according to the number of new code blocks generated in the new execution path;

randomly selecting M keys from the first N keys with high weights, carrying out variation on values corresponding to the M keys, simultaneously increasing the weights of the M keys if judging that a new execution path is generated after the instrumentation is executed, or simultaneously decreasing the weights of the M keys if judging that a new execution path is not generated after the instrumentation is executed, and randomly selecting the M keys from the first N keys with high weights again until the weights of the M keys are not more than a weight threshold value if the weights of the P keys in the M keys are lower than the weights of the first N keys with high weights to obtain a new combined seed file;

wherein N, M and P are natural numbers more than or equal to 1, and N is more than or equal to M and more than or equal to P.

4. The fuzzy test method for the text configuration file according to claim 1, wherein the mutating the value corresponding to the key in the key combination seed file specifically comprises:

circularly executing the following steps for preset times: randomly selecting an operation strategy to carry out variation on values corresponding to Q keys in the key combination seed file;

the preset times are determined according to the data length of the value corresponding to the key; the operation strategy comprises bit-wise overturning, integer addition and subtraction, data insertion and data deletion; q is a natural number of 1 or more.

5. A fuzzy test device for text configuration files is characterized by comprising:

the acquisition module is used for acquiring a target configuration file in a text file format;

the identification module is used for identifying the text file format type of the target configuration file and determining a key-value pair of the target configuration file;

the detection extraction module is used for performing pre-fuzzy test on the program taking the target configuration file as input so as to detect whether the program has a format bug and extracting all visible character strings in the program;

the key variation module is used for varying keys in the key-value pairs of the target configuration files by using the visible character strings to obtain key combination seed files;

the value variation module is used for varying values corresponding to the keys in the key combination seed file based on the weights of the keys in the key combination seed file to obtain a new combination seed file;

and the mining module is used for mining the vulnerability of the program by using the new combined seed file.

6. The text profile-oriented fuzz testing apparatus according to claim 5, wherein the key mutation module is specifically configured to:

for each visible character string, replacing a key in the key-value pair with the current visible character string to obtain a seed file, executing the seed file as an input instrumentation, and storing the key to an effective key set if a new execution path is generated;

and based on the effective key set, randomly deleting, replacing and adding any one of the keys in the seed file in sequence to obtain a key combination seed file.

7. The fuzz testing apparatus for text-oriented profiles according to claim 5, wherein the value variation module is specifically configured to:

the value corresponding to each key in the key combination seed file is subjected to variation, and if a new execution path is generated after the instrumentation is judged, the weight corresponding to the key is set according to the number of new code blocks generated in the new execution path;

randomly selecting M keys from the first N keys with high weights, carrying out variation on values corresponding to the M keys, simultaneously increasing the weights of the M keys if judging that a new execution path is generated after the instrumentation is executed, or simultaneously decreasing the weights of the M keys if judging that a new execution path is not generated after the instrumentation is executed, and randomly selecting the M keys from the first N keys with high weights again until the weights of the M keys are not more than a weight threshold value if the weights of the P keys in the M keys are lower than the weights of the first N keys with high weights to obtain a new combined seed file;

wherein N, M and P are natural numbers more than or equal to 1, and N is more than or equal to M and more than or equal to P.

8. The text-profile-oriented fuzz testing apparatus according to claim 5, wherein the value variation module is further configured to:

circularly executing the following steps for preset times: randomly selecting an operation strategy to carry out variation on values corresponding to Q keys in the key combination seed file;

the preset times are determined according to the data length of the value corresponding to the key; the operation strategy comprises bit-wise overturning, integer addition and subtraction, data insertion and data deletion; q is a natural number of 1 or more.

9. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the processor implements the steps of the text profile oriented fuzz testing method according to any of the claims 1 to 4 when executing the program.

10. A non-transitory computer readable storage medium, having stored thereon a computer program, wherein the computer program, when executed by a processor, implements the steps of the text profile oriented fuzz testing method according to any of claims 1 to 4.

Images