Constructed Type Algebra Based Protocol Security Testing Method

陈伟琳 1; 周颢 1; 3; 赵保华 1; 2; 3

您当前的位置：

首页 >

文章列表页 >

Constructed Type Algebra Based Protocol Security Testing Method

更新时间：2025-12-08

- Constructed Type Algebra Based Protocol Security Testing Method
- Vol. 42, Issue 12, Pages: 1481-1485(2008)
- 作者机构：
  
  1. 中国科学技术大学计算机科学与技术系,合肥,230027
  2. 网络与交换技术国家重点实验室,北京,100876
  3. 安徽省计算与通讯软件重点实验室,合肥,230027
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP311
- Online First：10 December 2008，
  
  Published：2008
- 稿件说明：
移动端阅览
陈伟琳 1, 周颢 1, 3, et al. Constructed Type Algebra Based Protocol Security Testing Method[J]. 2008, 42(12): 1481-1485.
DOI：

陈伟琳 1, 周颢 1, 3, et al. Constructed Type Algebra Based Protocol Security Testing Method[J]. 2008, 42(12): 1481-1485. DOI：

摘要

针对协议安全测试中数据流的描述问题

在构造类别代数的基础上引入变异分析

由此提出了一种协议安全测试方法.基于协议的描述设计了变异算子

然后对一致性公式集进行变异分析

从而得到安全变异项集. 将变异项转换为实际的安全测试例集

并描述由此进行的协议安全测试步骤.测试实践表明

所提方法能与一致性测试良好地结合

在一定程度上覆盖已知安全漏洞

并具有发现潜在问题的能力.

Abstract

Considering the data flow description in protocol security testing

mutation analysis is introduced based on constructed type algebra

and a new protocol security testing method is proposed. Mutant operators are designed based on protocol specification

security mutation formulas are generated from existing conformance testing expressions

and then practical security testing cases are transformed from these formulas. The steps of protocol security testing using the method are described. The method is well integrated with conformance testing to cover some known protocol security vulnerabilities

and has the ability to reveal potential problems.

关键词

Keywords

references

CCITT.290-ISO/IEC 9646-1991 Information technology open systems interconnection conformance testing methodology and framework [S].Geneva, Switzerland: CCITT, 1991.

ANDY WANG Ju'an. Security testing in software engineering courses [C]∥ 34th ASEE/IEEE Frontiers in Education Conference. Piscataway, NJ, USA: 2004:13-18.

龚正虎. 计算机网络协议工程 [M]. 长沙,国防科技大学出版社,1993.

HUANG Chung-Ming, LIN Chih-Hao. An EFSM-based formal model for providing VCR-like functions in multimedia systems[C]∥Proceedings of the 12th International Conference on Software Engineering Workshop on Multimedia Software Engineering. Los Alamitos, CA,USA: IEEE Comp. Soc., 1998:12-19.

孙宇霖,屈玉贵,赵保华.一种通信协议测试序列生成的新方法[J].通信学报,2001,22(6): 122-127.

SUN Yulin,QU Yugui,ZHAO Baohua. A new method of generation of communication protocol test sequence[J]. Journal of China Institute of Communications, 2001,22(6): 122-127.

DEMILLO R A, LIPTON R J, SAYWARD F G. Hints on test data selection: help for the practicing programmer [J]. Computer, 1978,11(4): 34-37.

AGRAWAL H, DEMILLO R A. Design of mutant operators for the c programming language, SERC-TR-41-P [R]. West Lafayette, IN, USA: Software Engineering Research Center, Purdue University, 1989.

SPAFFORD E H. Extending mutation testing to find environmental bugs [J]. Software Practice and Experience 1990,20(2): 181-189.

JIANG Ying, HOU Shanshan. Contract-based mutation for testing components [C]∥Proceedings of 21st IEEE International Conference on Software Maintenance. Los Alamitos, CA, USA: IEEE Comp. Soc., 2005: 483-492.

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

A Protocol Security Testing Method Using Mutation Analysis

Influence of Structural Parameters on the Summer Operational Characteristics of a Three-Tower-in-One Indirect Air-Cooling System

A Structure-Semantics-Residual Collaborative Image Compression Framework：Towards Privacy Protection and High-Fidelity Reconstruction

Effects of Steam Addition on the Swirl Combustion and Emission Characteristics of Cracked Ammonia

Study on the Thermodynamic Properties in the Anomalous Region of Supercritical Water

Related Author

章志燮 1

周颢 1

赵保华 1

Related Institution

Department of Computer Science and Technology, University of Science and Technology of China

State Key Laboratory of Networking and Switching Technology

Anhui Province Key Laboratory of Software in Computing and Communication

⁰