Network protocol security testing based on fuzz
Li Haifeng, Shaolei Wang, Bin Zhang, Shuai Bo, Tang Chaojing · 2015
In order to solve the problems of test message being rejected by the network server running the network protocol, a novel method is proposed by introducing the genetic algorithm into the test message generation process. Firstly, under the calculation of distance matrix, alignment of protocol sequence and identification of packet format are accomplished. Secondly, the genetic algorithm is introduced, and a novel fitness function design method is proposed in order to improve the similarity between test message and normal message. On the basis of the above, the test message and the normal message are very similar, so that the fuzz testing could achieve effective result. Experiments of FTP protocol fuzz testing show that the proposed method could obtain sufficiently test messages.