IKEChecker：语法引导的IKE协议有状态模糊测试
doaj（2024）
Abstract
互联网密钥交换（IKE,internet key exchange）协议用于在IPSec(internet protocol security)协议中进行身份验证和密钥协商，其安全性对保护IP通信至关重要，复杂的协议逻辑导致协议实现中难免存在安全漏洞。模糊测试是检测协议实现中潜在漏洞的有效手段，但将现有模糊测试工具直接应用于IKE协议时，存在生成测试用例质量不高、难以探索深层状态空间等局限性。针对上述问题，设计了基于IKE协议语法的变异策略来减少无效测试用例的生成，同时增加测试用例的多样性；引入了基于进化策略的变异调度方案来自动优化变异算子的概率分布，进一步提高生成高质量测试用例的概率；设计了消息处理器用来维护协议交互上下文信息并执行密码学相关的操作，从而支持在黑盒条件下对IKE协议进行测试，并实现对深层协议交互行为和状态空间的探索。基于上述方法实现了IKE协议有状态模糊测试工具IKEChecker，该工具支持对IKEv1和IKEv2协议进行测试。对两种广泛使用的支持IKE协议实现的开源软件strongSwan和Libreswan进行测试，发现4个未公开漏洞；通过与其他模糊测试工具对比，评估了IKEChecker在漏洞检测方面的效率。
MoreTranslated text
Key words
security protocol,fuzz testing,software testing,IKE protocol
求助PDF
上传PDF
View via Publisher
AI Read Science
AI Summary
AI Summary is the key point extracted automatically understanding the full text of the paper, including the background, methods, results, conclusions, icons and other key content, so that you can get the outline of the paper at a glance.
Example
Background
Key content
Introduction
Methods
Results
Related work
Fund
Key content
- Pretraining has recently greatly promoted the development of natural language processing (NLP)
- We show that M6 outperforms the baselines in multimodal downstream tasks, and the large M6 with 10 parameters can reach a better performance
- We propose a method called M6 that is able to process information of multiple modalities and perform both single-modal and cross-modal understanding and generation
- The model is scaled to large model with 10 billion parameters with sophisticated deployment, and the 10 -parameter M6-large is the largest pretrained model in Chinese
- Experimental results show that our proposed M6 outperforms the baseline in a number of downstream tasks concerning both single modality and multiple modalities We will continue the pretraining of extremely large models by increasing data to explore the limit of its performance
Upload PDF to Generate Summary
Must-Reading Tree
Example
Generate MRT to find the research sequence of this paper
Data Disclaimer
The page data are from open Internet sources, cooperative publishers and automatic analysis results through AI technology. We do not make any commitments and guarantees for the validity, accuracy, correctness, reliability, completeness and timeliness of the page data. If you have any questions, please contact us by email: report@aminer.cn
Chat Paper
Summary is being generated by the instructions you defined