Research And Improvement Of Peachfuzz Fuzz Test Platform

With comprehensive arrival of information age, the computer network has become an extraordinarily important part of our daily life and its convenience is completely obvious. However, the risk is also increasing with its own security problems. Many protocol standards did not take into account the issue of network security in the network protocols. In recent years, with the protocol vulnerabilities make security problem increasingly serious, the protocol vulnerabilities mining has become increasingly important to highlight its position. Fuzzing technology is the focus in protocol vulnerability mining areas. Peachfuzz has attracted more and more attention because of its outstanding performance in the protocol vulnerabilities mining with its high reliability, versatility, ease of use and other intelligent features in various Fuzzing tools. However, the Peachfuzz platform still exist some disadvantages such as its interface is not friendly enough and the variant samples cannot be easily extended and sample test cases cannot be selected.In response to these problems, we have a study for the ease of use and scalability about Peachfuzz platform and we achieves the following results:1. To provide users with a friendly protocol state machine modeling platform and implement the WYSIWYG effect that this model of protocol state machine can be built in an intuitive and convenient way by dragging directly, the user-created graphical model is converted to internally defined file format and then it is converted to Peachfuzz internal PitFile documents. Finally, protocol security experts can just focus on the protocol itself, rather than tedious PitFile syntax.2. To provide users with the variant sample extensions platform that enables users to extend the set of variations of Peachfuzz freely and can automatically add them to the Peachfuzz that enhances the scalability of Peachfuzz; To allow users to set three different levels of ratio of test sample according to different requirements and they can be automatically applied to the Peachfuzz that improves the speed of Peachfuzz test.