摘要： 针对当前统一可扩展固件接口(UEFI)固件漏洞大幅增多，且缺乏高效漏洞检测系统的问题，提出面向UEFI固件的模糊测试系统，采用模糊测试技术检测固件漏洞。该系统复用了原UEFI下自我认证测试系统的测试框架，同时使用专门的子系统生成高针对性的测试数据，并基于UEFI固件的驱动-协议模型为测试用例提供统一的编程接口。以一个UEFI下实际的固件安全漏洞为例，揭示该系统检测固件安全漏洞的能力。实验结果表明，该模糊测试系统不仅可以简化测试用例的开发，而且编写的测试用例比自我认证测试系统提升了15%的代码覆盖率，能有效应用于UEFI固件深层、高危安全漏洞的检测。

关键词: 统一可扩展固件接口, 模糊测试, 固件, 代码覆盖率, 漏洞检测, 基本输入输出系统

Abstract: With the increase of code vulnerabilities in Unified Extensible Firmware Interface(UEFI) firmware and the lack of effective vulnerability detection systems, this paper develops a fuzzy test system for UEFI firmware. It applies fuzzy test technique to UEFI firmware vulnerability detection. The system reuses test framework of Self Certification Test(SCT) system, generates test data through a special subsystem to ensure the quality and provides APIs for creating test cases. Also, the vulnerability detection capability of the system is revealed through real security vulnerability in UEFI firmware. Experimental results show that, test cases can be written more easily but with 15% higher code coverage than the SCT system based on this system, which ensures the ability to detect deep, high risk security vulnerabilities.

Key words: Unified Extensible Firmware Interface(UEFI), fuzzy test, firmware, code coverage rate, vulnerability detection, Basic Input Output System(BIOS)

中图分类号: 

• TP311