A Protocol Security Testing Method Using Mutation Analysis

您当前的位置：

首页 >

文章列表页 >

A Protocol Security Testing Method Using Mutation Analysis

更新时间：2025-07-09

- A Protocol Security Testing Method Using Mutation Analysis
- Vol. 43, Issue 12, Pages: 11-15(2009)
- 作者机构：
  
  1. 中国科学技术大学计算机科学与技术系,合肥,230027
  2. 网络与交换技术国家重点实验室,北京,100876
  3. 安徽省计算与通讯软件重点实验室,合肥,230027
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP393.06
- Online First：10 December 2009，
  
  Published：2009
- 稿件说明：
移动端阅览
A Protocol Security Testing Method Using Mutation Analysis[J]. 2009, 43(12): 11-15.
DOI：

A Protocol Security Testing Method Using Mutation Analysis[J]. 2009, 43(12): 11-15. DOI：

摘要

在基于构造类别代数的协议描述上引入变异分析方法

由此提出了一种基于错误模型的协议安全测试方法.通过设计针对构造类别代数的变异算子

限制了协议中的错误集合; 应用变异算子生成变异体集合

并消除其中的等价变异体; 基于变异体构造安全测试例.同比研究表明

采用基于错误模型的变异分析方法

可以有效解决协议安全测试中忽视协议数据流处理过程、错误集合无限和缺少结果判断机制等问题

限定协议可能存在的错误集合

有利于测试的量化和评估

能够更有针对性地进行测试例构造和测试结果判断

提高测试能力.

Abstract

A new protocol security testing method is proposed based on a fault model. The method utilizes the mutation analysis based on the specification of constructed type algebra. Mutant operators are designed to restrict the possible fault sets in protocol; then mutants are generated and equivalent mutants are deleted; and test cases are finally constructed based on resulting mutants. Compared with existing methods

the proposed method can effectively solve several problems in current protocol security testing

such as neglecting the protocol dataflow

infinite fault sets

the lack of the mechanism to judge results

and so on. It is beneficial to the quantification and appraisal of testing to limit the possible fault sets of protocol. The method can pointedly be used to construct test cases and to judge test results

and improves testing capacity.

关键词

Keywords

references

KAKSONEN R. A Functional method for assessing protocol implementation security [EB/OL]. [2009-01-20].http:∥www.vtt.fi/inf/pdf/publications/2001/P447.pdf

SHU Xiao, DENG Lijun. Integrated TCP/IP protocol software testing for vulnerability detection [C]∥Proceedings of the 2003 International Conference on Computer Networks and Mobile Computing. Los Alamitos, CA, USA: IEEE Computer Society, 2003: 311-319.

MARQUIS S, DEAN T, KNIGHT S. SCL: a language for security testing of network applications [C]∥Proceedings of the 2005 Conference of the Centre for Advanced Studies on Collaborative Research. Lebanon, IN, USA: IBM Press, 2005:155-164.

ALLEN W H, DOU C. A model-based approach to the security testing of network protocol implementations [C]∥31st IEEE Conference on Local Computer Networks. Piscataway, NJ, USA: IEEE, 2006:1008-1015.

周晓煜. 基于形式化描述的协议一致性测试方法的研究 [D]. 合肥:中国科学技术大学计算机科学与技术系, 2004.

陈伟琳,周颢,赵保华. 利用构造类别代数的协议安全测试方法 [J]. 西安交通大学学报, 2008, 42(12):1481-1485.

CHEN Weilin, ZHOU Hao, ZHAO Baohua. Constructed type algebra based protocol security testing method[J]. Journal of Xi'an Jiaotong University, 2008, 42(12):1481-1485.

WONG W E. On mutation and data flow [D]. West Lafayette, USA: Purdue University.Software Engineering Research Center, 1993.

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Constructed Type Algebra Based Protocol Security Testing Method

Turbulent Kinetic Energy Dissipation Mechanism of Supercritical Carbon Dioxide Leakage Flow in a Scallop Bionic Seal Cavity

Integrated and Joint Design Optimization of Centrifugal Compressor Impeller and Casing Treatment at Multiple Working Points

A Fast Calculation Method for Thermal Flow Fields in Transformer Windings Based on PI-DeepONet

Mechanism and Optimal Control Strategy for Hysteresis in Rapid Dehumidification Response of Indirect Thermal Systems in Electric Vehicles

Related Author

陈伟琳 1

周颢 1

赵保华 1

Related Institution

中国科学技术大学计算机科学与技术系

网络与交换技术国家重点实验室

安徽省计算与通讯软件重点实验室

⁰