基于脆弱点分析的故障注入技术

doi:10.3969/j.issn.1006-2475.2019.12.008

计算机与现代化

基于脆弱点分析的故障注入技术

(华北计算技术研究所创新中心，北京100083)

收稿日期:2019-05-24 出版日期:2019-12-11 发布日期:2019-12-11
作者简介:卫津逸(1995-)，男，山西晋城人，硕士研究生，研究方向：计算机应用，软件测试，E-mail: 13020077476@163.com; 徐珞(1976-)，男，北京人，研究员级高级工程师，博士，研究方向：软件测试，系统仿真，E-mail: wang.100@qq.com; 戴文博(1995-)，男，安徽合肥人，硕士研究生，研究方向：软件工程DevOps，E-mail: 632419233@qq.com。

Fault Injection Technique Based on Vulnerability Analysis

(Innovation Center, North China Institute of Computing Technology, Beijing 100083, China)

Received:2019-05-24 Online:2019-12-11 Published:2019-12-11

摘要/Abstract

摘要： 针对分布式系统规模愈发庞大的现状，提出故障搜索策略——脆弱点辅助识别算法，结合常见故障模式的故障注入模型，研究基于脆弱点分析的故障注入技术，用于搜索指定故障范围内的故障组合，从而能够快速、有效地进行故障注入，提升测试效率。

关键词: 脆弱点, 故障注入, 分布式系统, 风险, 故障模式

Abstract: Aiming at the increasing scale of distributed systems, this paper proposes a fault search strategy—a vulnerability-assisted recognition algorithm. Combined with the fault injection model of common fault modes, we study the fault injection technology based on vulnerability analysis for searching fault combination within the specified fault range, which enables fault injection quickly and efficiently, improving test efficiency.

Key words: vulnerabilities, fault injection, distributed system, risk, fault modes

中图分类号:

TP311.5

卫津逸，徐珞，戴文博. 基于脆弱点分析的故障注入技术[J]. 计算机与现代化, doi: 10.3969/j.issn.1006-2475.2019.12.008.

WEI Jin-yi, XU Luo, DAI Wen-bo. Fault Injection Technique Based on Vulnerability Analysis[J]. Computer and Modernization, doi: 10.3969/j.issn.1006-2475.2019.12.008.

参考文献

［1］苏永定,刘冠军,邱静,等. 系统测试性指标确定方法［J］. 测试技术学报, 2008,22(5):401-405.
［2］刘金琨. 智能控制［M］. 北京:电子工业出版社, 2005.
［3］王宝龙,黄考利,郭瑞,等. 基于故障树分析的复杂电子装备诊断策略优化实现［J］. 弹箭与制导学报, 2006,26(2):448-451.
［4］许斌,周鸣岐. 测试点优化及故障诊断树生成技术［J］. 国外电子测量技术, 2006,25(3):15-19.
［5］张大方,江招生. 系统级故障诊断的一种优化设计方法［J］. 湖南大学学报, 1998,25(3):105-107.
［6］张大方,江招生. 基于集团的系统级故障诊断研究［J］. 计算机学报, 1998,21(4):308-314.
［7］SOSNOWSKI J, GAWKOWSKI P, ZYGULSKI P, et al. Enhancing fault injection testbench［C］// Proceedings of the 2006 International Conference on Dependability of Computer Systems. 2006:76-83.
［8］STOTT D T, FLOERING B, BURKE D, et al. NFTAPE: A framework for assessing dependability in distributed system with lightweight fault injectors［C］// Proceedings of the 4th International Computer Performance and Dependability Symposium. 2000:91-100.
［9］〖JP2〗徐珞,吴际,刘超. 一种模型驱动的协议测试故障注入引擎设计［J］. 计算机工程与应用, 2007,43(16):111-113.
［10］Microsoft Azure. Introduction to the Fault Analysis Service［EB/OL］. (2017-06-15)［2019-05-09］. https://azure.microsoft.com/en-us/documentation/articles/service-fabric-testability-overview/.
［11］SHENOY A. A Deep Dive into Simoorg: Our Open Source Failure Induction Framework［EB/OL］. (2016-03-28)［2019-05-09］. https://engineering.linkedin.com/blog/2016/03/deep-dive-Simoorg-open-source-failure-induction-framework.
［12］Open Web Application Security Project. OWASP Testing Guide Version 3.0［EB/OL］. (2008-12-20)［2019-05-09］. http://www.owasp.org.cn/owasp-project/download/OWASP_testing_guide.
［13］SOUZA E, GUSMAO C, ALVES K, et al. Measurement and control for risk-based test cases and activities［C］// Proceedings of the 10th Latin American Test Workshop. 2009. DOI: 10.1109/LATW.2009.4813802.
［14］WACK J, TRACY M, SOUPPAYA M. Guideline on Network Security Testing: Recommendations of the National Institute of Standards and Technology［R］. NIST Special Publication 800-42, 2003.
［15］ZIMMERMANN F, ESCHBACH R, KLOOS J, et al. Risk-based statistical testing: A refinement-based approach to the reliability analysis of safety-critical systems［C］// Proceedings of the 12th European Workshop on Dependable Computing. 2009.
［16］HARI S K S, ADVE S V, NAEIMI H, et al. Relyzer: Exploiting application-level fault equivalence to analyze application resiliency to transient faults［C］// Proceedings of the 17th International Conference on Architectural Support for Programming Languages and Operating Systems. 2012:123-134.
［17］ZIADE H, AYOUBI R, VELAZCO R. A survey on fault injection techniques［J］. The International Arab Journal of Information Technology, 2004,1(2):171-186.
［18］KOOLI M, DI NATALE G. A survey on simulation-based fault injection tools for complex systems［C］// Proceedings of the 9th International Conference on Design & Technology of Integrated Systems in Nanoscale Era. 2014. DOI: 10.1109/DTIS.2014.6850649.
［19］MALLOULI W, WEHBI B, CAVALLI A R, et al. Formal supervision of mobile ad hoc networks for security flaws detection［M］// Security Engineering Techniques and Solutions for Information Systems: Management and Implementation. IGI Global, 2011. DOI: 10.4018/978-1-61520-803-6.
［20］EL KALAM A A, EL BAIDA R, BALBIANI P, et al. Organization based access control［C］// Proceedings of the 4th IEEE International Workshop on Policies for Distributed Systems and Networks. 2003:120-131.
［21］BOUQUET F, GRANDPIERRE C, LEGEARD B, et al. A subset of precise UML for model-based testing［C］// Proceedings of the 3rd International Workshop on Advances in Model-based Testing. 2007:95-104.
［22］BRIDGES S M, VAUGHN R B. Fuzzy data mining and genetic algorithms applied to intrusion detection［C］// Proceedings of the 2000 National Information Systems Security Conference. 2000:13-31.
［23］CAVALLI A, LEE D, RINDERKNECHT C, et al. Hit-or-jump: An algorithm for embedded testing with application to in services［M］// Formal Methods for Protocol Engineering and Distributed Systems. Springer, 1999:41-56.
［24］HAREL D. Statecharts: A visual formalism for complex systems［J］. Science of Computer Programming, 1987,8(3):231-274.

[1]	陈超, 顾青峰. 面向混合负载的分布式气象数据管理系统设计[J]. 计算机与现代化, 2023, 0(12): 118-122.
[2]	管金平, 杨晋吉, 杨成龙. 基于概率模型的Raft协议形式化验证[J]. 计算机与现代化, 2023, 0(09): 77-81.
[3]	袁嘉立, 刘梦赤. 面向信息网模型的动态数据划分算法[J]. 计算机与现代化, 2022, 0(10): 100-105.
[4]	刘强, 李巧, 鲍晓. 基于国产TCM芯片加密的边云协同数据采集架构[J]. 计算机与现代化, 2022, 0(08): 94-98.
[5]	卢赛, 庄毅. 基于自适应专家权重的信息系统风险评估模型[J]. 计算机与现代化, 2021, 0(08): 85-93.
[6]	杨晓东. 基于遗传算法的会计资源共享管理风险评估模型[J]. 计算机与现代化, 2021, 0(06): 24-28.
[7]	郑伟宁, 庄毅, 顾浩为. 一种检测控制流错误的多层分段标签方法[J]. 计算机与现代化, 2020, 0(08): 41-50.
[8]	崔雯迪, 段鹏飞, 朱红强, 刘娜. 攻击图与HMM工业控制网络安全风险评估[J]. 计算机与现代化, 2020, 0(07): 32-37.
[9]	杨牧川, 吕晓丹, 蒋朝惠, . 云计算环境下的可修分布式系统可靠性分析方法[J]. 计算机与现代化, 2020, 0(06): 28-.
[10]	蒋毅,欧郁强,梁广,高杨,严永高,林捷,赵晓宁. 基于数据挖掘的现场作业风险态势评估方法[J]. 计算机与现代化, 2020, 0(04): 78-.
[11]	潘卫军，陈佳炀，张智巍，张晓磊，刘铠源，王思禹. 管制空域内无人机与有人机侧向碰撞风险研究[J]. 计算机与现代化, 2020, 0(03): 1-.
[12]	刘斌，陈凯 . 基于SMOTE和XGBoost的贷款风险预测方法[J]. 计算机与现代化, 2020, 0(02): 26-.
[13]	王骞，闫夏莉，叶崛宇，张海阔，李真辉 . 面向权威DNS的数据一致性保障机制[J]. 计算机与现代化, 2020, 0(02): 36-.
[14]	叶茜1,王玉斐2,傅毅3,唐玉兰1 . 基于GQM模型的工业控制系统风险评估方法[J]. 计算机与现代化, 2019, 0(08): 92-.
[15]	弭乾坤1，吴斌2，杜宁1，秦晰1. 基于不完全信息博弈模型的信息系统安全风险评估方法[J]. 计算机与现代化, 2019, 0(04): 118-.

基于脆弱点分析的故障注入技术

Fault Injection Technique Based on Vulnerability Analysis

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价