面向变异分析的协议安全测试方法

在基于构造类别代数的协议描述上引入变异分析方法,由此提出了一种基于错误模型的协议安全测试方法.通过设计针对构造类别代数的变异算子,限制了协议中的错误集合;应用变异算子生成变异体集合,并消除其中的等价变异体;基于变异体构造安全测试例.同比研究表明,采用基于错误模型的变异分析方法,可以有效解决协议安全测试中忽视协议数据流处理过程、错误集合无限和缺少结果判断机制等问题,限定协议可能存在的错误集合,有利于测试的量化和评估,能够更有针对性地进行测试例构造和测试结果判断,提高测试能力.

A Protocol Security Testing Method Using Mutation Analysis

A new protocol security testing method is proposed based on a fault model.The meth-od utilizes the mutation analysis based on the specification of constructed type algebra.Mutant operators are designed to restrict the possible fault sets in protocol;then mutants are generated and equivalent mutants are deleted;and test cases are finally constructed based on resulting mu-tants.Compared with existing methods,the proposed method can effectively solve several prob-lems in current protocol security testing,such as neglecting the protocol dataflow,infinite fault sets,the lack of the mechanism to judge results,and so on. It is beneficial to the quantification and appraisal of testing to limit the possible fault sets of protocol.The method can pointedly be used to construct test cases and to judge test results,and improves testing capacity.