Automatic Test Pattern Generator for Fuzzing Based on Finite State Machine
Joint Authors
Lei, Chin-Laung
Wang, Ming-Hung
Wang, Han-Chi
Chen, You-Ru
Source
Security and Communication Networks
Issue
Vol. 2017, Issue 2017 (31 Dec. 2017), pp.1-11, 11 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2017-11-13
Country of Publication
Egypt
No. of Pages
11
Main Subjects
Information Technology and Computer Science
Abstract EN
With the rapid development of the Internet, several emerging technologies are adopted to construct fancy, interactive, and user-friendly websites.
Among these technologies, HTML5 is a popular one and is widely used in establishing modern sites.
However, the security issues in the new web technologies are also raised and are worthy of investigation.
For vulnerability investigation, many previous studies used fuzzing and focused on generation-based approaches to produce test cases for fuzzing; however, these methods require a significant amount of knowledge and mental efforts to develop test patterns for generating test cases.
To decrease the entry barrier of conducting fuzzing, in this study, we propose a test pattern generation algorithm based on the concept of finite state machines.
We apply graph analysis techniques to extract paths from finite state machines and use these paths to construct test patterns automatically.
According to the proposal, fuzzing can be completed through inputting a regular expression corresponding to the test target.
To evaluate the performance of our proposal, we conduct an experiment in identifying vulnerabilities of the input attributes in HTML5.
According to the results, our approach is not only efficient but also effective for identifying weak validators in HTML5.
American Psychological Association (APA)
Wang, Ming-Hung& Wang, Han-Chi& Chen, You-Ru& Lei, Chin-Laung. 2017. Automatic Test Pattern Generator for Fuzzing Based on Finite State Machine. Security and Communication Networks،Vol. 2017, no. 2017, pp.1-11.
https://search.emarefa.net/detail/BIM-1203135
Modern Language Association (MLA)
Wang, Ming-Hung…[et al.]. Automatic Test Pattern Generator for Fuzzing Based on Finite State Machine. Security and Communication Networks No. 2017 (2017), pp.1-11.
https://search.emarefa.net/detail/BIM-1203135
American Medical Association (AMA)
Wang, Ming-Hung& Wang, Han-Chi& Chen, You-Ru& Lei, Chin-Laung. Automatic Test Pattern Generator for Fuzzing Based on Finite State Machine. Security and Communication Networks. 2017. Vol. 2017, no. 2017, pp.1-11.
https://search.emarefa.net/detail/BIM-1203135
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1203135