作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程

• 开发研究与工程应用 • 上一篇    下一篇

面向新一代固件接口标准的固件模糊测试系统

马佳敏1,潘 理1,姚颉文2   

  1. (1. 上海交通大学电子信息与电气工程学院电子工程系,上海 200240;2. Intel亚太研发有限公司,上海 200336)?
  • 收稿日期:2013-06-20 出版日期:2014-07-15 发布日期:2014-07-14
  • 作者简介:马佳敏(1989-),男,硕士研究生,主研方向:访问控制,系统软件测试;潘 理,副教授、博士生导师;姚颉文,工程师。
  • 基金资助:
    国家自然科学基金资助项目(60903191);上海市自然科学基金资助项目(11ZR1418500);上海市优秀技术带头人计划基金资助项目(13XD1425100)。

Firmware Fuzzy Test System Oriented to New Generation Firmware Interface Standard

MA Jia-min 1, PAN Li 1, YAO Jie-wen 2   

  1. (1. Department of Electronic Engineering, School of Electronic Information and Electric Engineering, Shanghai Jiaotong University, Shanghai 200240, China; 2. Intel Asia-pacific Research and Development Ltd., Shanghai 200336, China)
  • Received:2013-06-20 Online:2014-07-15 Published:2014-07-14

摘要: 针对当前统一可扩展固件接口(UEFI)固件漏洞大幅增多,且缺乏高效漏洞检测系统的问题,提出面向UEFI固件的模糊测试系统,采用模糊测试技术检测固件漏洞。该系统复用了原UEFI下自我认证测试系统的测试框架,同时使用专门的子系统生成高针对性的测试数据,并基于UEFI固件的驱动-协议模型为测试用例提供统一的编程接口。以一个UEFI下实际的固件安全漏洞为例,揭示该系统检测固件安全漏洞的能力。实验结果表明,该模糊测试系统不仅可以简化测试用例的开发,而且编写的测试用例比自我认证测试系统提升了15%的代码覆盖率,能有效应用于UEFI固件深层、高危安全漏洞的检测。

关键词: 统一可扩展固件接口, 模糊测试, 固件, 代码覆盖率, 漏洞检测, 基本输入输出系统

Abstract: With the increase of code vulnerabilities in Unified Extensible Firmware Interface(UEFI) firmware and the lack of effective vulnerability detection systems, this paper develops a fuzzy test system for UEFI firmware. It applies fuzzy test technique to UEFI firmware vulnerability detection. The system reuses test framework of Self Certification Test(SCT) system, generates test data through a special subsystem to ensure the quality and provides APIs for creating test cases. Also, the vulnerability detection capability of the system is revealed through real security vulnerability in UEFI firmware. Experimental results show that, test cases can be written more easily but with 15% higher code coverage than the SCT system based on this system, which ensures the ability to detect deep, high risk security vulnerabilities.

Key words: Unified Extensible Firmware Interface(UEFI), fuzzy test, firmware, code coverage rate, vulnerability detection, Basic Input Output System(BIOS)

中图分类号: