The paper provides a state of current technologies, which are used for automated vulnerability testing in software. Features of fuzzing technology (which is based on making many inputs with different mutated data) are also studied. The essence of the algorithm is the selection of input data, which are more likely to cause a failure or incorrect behavior of the software product. Deep learning algorithms are used to reduce the computational complexity of the testing process. Using a simple fuzzer and Deep Reinforcement Learning algorithm shows that the number of mutations required to detect vulnerabilities is reduced by 30%.

Automated software vulnerability testing using deep learning methods

Kuznetsov
;
2019-01-01

Abstract

The paper provides a state of current technologies, which are used for automated vulnerability testing in software. Features of fuzzing technology (which is based on making many inputs with different mutated data) are also studied. The essence of the algorithm is the selection of input data, which are more likely to cause a failure or incorrect behavior of the software product. Deep learning algorithms are used to reduce the computational complexity of the testing process. Using a simple fuzzer and Deep Reinforcement Learning algorithm shows that the number of mutations required to detect vulnerabilities is reduced by 30%.
File in questo prodotto:
Non ci sono file associati a questo prodotto.

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11389/68669
 Attenzione

Attenzione! I dati visualizzati non sono stati sottoposti a validazione da parte dell'ateneo

Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus ND
  • ???jsp.display-item.citation.isi??? ND
social impact