Android Platform Application Layer Network Protocol Testing Tools Based On Fuzzing Technique

Because of involves many kinds and different platforms have their particular implementation, Application layer network protocols unable to accept a variety of rigorous tests that like other low-level protocols which were widely used. Android system is currently the most widely used mobile operating system in the intelligent terminal, running a large number of network protocols related applications on this platform. Due to the lack of improve processing logic on data packets when developers design the protocol and software design process, some application software crashes during operation or no response other anomalies, this will not only result in a decline in user experience, but also threaten the security of important data on mobile devices. Although currently there are some application testing tools for Android, these tools are more biased in favor of the correctness of the application functionality, lack of tools to test the capacity for application processing malformed network protocol data.Fuzzing technology in the desktop operating system platform vulnerabilities mining areas showing a huge advantage, introduce its idea to test protocol of Android platform will effectively improve the Android protocol application security and robustness. In this paper, base on fuzzing technology, designed and implemented a unified standard description of the application layer network protocol testing tools of Android platform. Main contents of this paper are as follows:1. Designed unified specification describes and mutation algorithm. Through the analysis of common network protocol format, design and implementation of a common protocol for fuzzing description rules, design of various types of protocol fields targeted mutation algorithm, based on concerns ultimately controlled variation of common deformity fuzzing data generator, used to generate abnormal test data which meet the protocol specification efficiently.2. Design and implementation of the Android platform application layer protocol automation test tools. In the side the host PC, design test case generation and control subsystem, provide test case generation and transmission control functions, and observe the corresponding state in the status window; In the Android side, design test running and monitoring subsystem, complete test case receiving and analyzing functions, test API calls and results are stored and display functions, and automated test applications starting、calling and application anomaly detection and analysis and verification test results show functions.3. Completion of the typical protocol API and application testing of Android platform. Analyze the target protocol vulnerabilities that may exist, complete NFC and SMS protocol packet processing API and application testing, inference that may be present in the API implementation problems according to the test results, and related robust defect exist in the development of software applications, thus to guide application developers to improve the quality of network protocol related software.