Design And Implementation Of ELF Vulnerability Detection System Based On Fuzz Testing Technique

Because of concept of cyberspace warfare,cyberspace has become the fifth battlefield after land,sea,air and sky,and network security is becoming more and more important.As the core of networking information system,the security of computer software is especially important,and computer software security vulnerability has become one of the main sources of network security risk.In the current cyberspace game,software security vulnerabilities as a strategic resource is actively concerned,how to effectively find software vulnerabilities,eliminate or reduce the negative impact of the vulnerability on social life and national information security,finding vulnerabilities and vulnerability protection work have become a research focus in the world within the field of information security.Based on this,this thesis designs and implements a ELF vulnerability detection system based on fuzzy testing technology.The primary works in this thesis are presented as follows:(1)Introduce the design idea of ELF vulnerability detection system based on fuzzing testing technology for Linux release,and realizes the automatic detection of ELF vulnerability;(2)Create the idea of the abnormal and executable ELF file format algorithm and realize it.Its implementation can effectively solve the malformed sample generation problem,the generated abnormal samples is not limited by number and types of restrictions,and have more randomness.Security vulnerabilities can be effectively explored by the ELF vulnerability detection system;(3)Design and implement a module and units based on automatic task dealing algorithm,which can effectively and automatically find security vulnerabilities in the Linux system;(4)Design and implement a static and dynamic debugging module based on formatted logging system,which can automatically record the system abnormalities triggered by ELF malformed samples.The final technical blue print based on ELF vulnerability detection system can be constructed independently and efficiently.ELF vulnerability detection system whichhas been used in Beijing City,a unit of investment,to solve the ELF vulnerability automatic detection of this problem.It meets the demand of information security standards,and for the finding and repair system vulnerabilities.It provides practical help to reduce cyberspace attack of hackers,especially in the embedded system,network system,intelligent terminals,cloud computing,network equipment and other related industries.