arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2201.11303cs.SEcs.CR
收藏

突变分析:应对模糊化挑战

Mutation Analysis: Answering the Fuzzing Challenge

Rahul Gopinath, Philipp Görz, Alex Groce

摘要:

模糊测试是软件测试中发展最快的领域之一。fuzzing背后的想法是针对大量随机生成的输入来检查软件的行为,试图覆盖输入空间的所有有趣部分,同时观察测试软件的异常行为。fuzzer用户面临的最大挑战之一是如何验证软件行为,以及如何提高所使用的oracle的质量。虽然变异分析是评价软件测试预言机质量的首要技术,但变异分数很少被用作评价模糊质量的度量。除非突变分析研究人员能够解决将突变分析应用于模糊测试的多个问题,否则突变分析可能会在测试和安全研究的最重要领域之一永久靠边站。本文试图了解应用变异分析评估模糊器的主要挑战,以便研究人员可以专注于解决这些挑战。

英文摘要:

Fuzzing is one of the fastest growing fields in software testing. The idea behind fuzzing is to check the behavior of software against a large number of randomly generated inputs, trying to cover all interesting parts of the input space, while observing the tested software for anomalous behaviour. One of the biggest challenges facing fuzzer users is how to validate software behavior, and how to improve the quality of oracles used. While mutation analysis is the premier technique for evaluating the quality of software test oracles, mutation score is rarely used as a metric for evaluating fuzzer quality. Unless mutation analysis researchers can solve multiple problems that make applying mutation analysis to fuzzing challenging, mutation analysis may be permanently sidelined in one of the most important areas of testing and security research. This paper attempts to understand the main challenges in applying mutation analysis for evaluating fuzzers, so that researchers can focus on solving these challenges.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑