Automatizirano testiranje uz pomoć alata AFL

master's thesis

• Title (english): Automated testing using the AFL tool
• Author: Ivan Ivanković
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Marin Golub (član povjerenstva)
• Committee member: Leonardo Jelenković (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2022-07-11, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Rastom složenosti se otvara sve više vektora napada na programsku podršku i sustave. Kako bi se uklonili vektori napada potrebno
je napraviti prikladna testiranja i ukloniti pronađene sigurnosne propuste. Brojni sustavi nisu jednostavni za testiranje
zbog njihove kompleksnosti i u tom slučaju kao koristan alat se može koristiti emulacija sustava. QEMU je alat koji
omogućuje emulaciju cijelog sustava.

Načini i alati pomoću kojih se može provesti testiranje su brojni, ali alat prikladan za testiranje emuliranog sustava je
AFL++ alat. Zbog nedostatka podrške testiranja cijelog sustava, u ovom radu je obrađeno način na koji se trebaju prilagoditi
oba alata kako bi mogli funkcionirati zajedno.

U radu se prolaze izmjene u izvornom kodu QEMU-a kako bi se moglo pratiti izvođenje koda unutar emulacije. Razvija se premosnik
izmedu QEMU i AFL++ alata kako bi se omogućila komunikacija među njima.

Abstract (english)

With the increasing complexity of computer systems, the attack surface is also increasing.
To reduce the attack surface, it's necessary to do appropriate testing and remove newly
found vulnerabilities. A lot of computer systems are not easy to test because of their
complexity and size. In those cases, emulation can be a great tool for making testing of
those complex systems easier. QEMU is a tool that can emulate the whole system.

There are many different tools and approaches to testing, but a tool like AFL++ stands
out as one of the more popular tools today. Because AFL++ currently doesn't support
testing of system emulation, in this thesis it is explained how to modify both
tools to achieve testing of system emulation.

This thesis explains how to modify source code of QEMU tool to gather code coverage of
emulation. A proxy tool was also developed to orchestrate communication
between AFL++ and QEMU tools.

This thesis explains how to modify source code of QEMU tool to gather code coverage of
emulation. A proxy tool was also developed to orchestrate communication
between AFL++ and QEMU tools.

• Keywords: AFL; AFL++; QEMU; TCG; QEMU sistemska emulacija
• Keywords (english): AFL; AFL++; QEMU; TCG; QEMU system emulation
• Language: croatian
• URN:NBN: urn:nbn:hr:168:711636
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-14 20:38:51