关键词: WiFi协议, 模糊测试, 测试用例, 权重反馈, 漏洞挖掘

Abstract: With the widespread application of wireless networks and the rapid development of Internet of Things, the security of WiFi protocol has become an important concern in the field of network security. Fuzz testing, as an effective method for detecting software vulnerabilities, has been widely used in the security testing of WiFi protocols. However, traditional fuzz testing methods have certain limitations in the generation and optimization of testing cases, resulting in low efficiency and unsatisfactory accuracy in vulnerability mining. This paper first analyzes the characteristics of the WiFi protocol and the strategy of fuzz testing, and then proposes a configuration tree model for the weight of the testing cases suitable for the WiFi protocol and a calculation matrix of weight based on critical values. By introducing a multiround mechanism of fuzz testing and realtime weight feedback, the dynamic adjustment of the weight of the testing cases are realized, and testing cases that are more likely to trigger exceptions are screened out. The experimental results show that the method proposed in this paper can significantly improve the effectiveness of fuzz testing cases of WiFi protocol and the accuracy of vulnerability mining.

Key words: WiFi protocol, fuzz testing, testing case, weight feedback, vulnerability mining