article · 2024

SPAFuzz: Web Security Fuzz Testing Tool Based on Fuzz Testing and Genetic Algorithm

Cited by 0Abstract and details only

Abstract

Fuzzing is one of the most effective methods currently available for detecting web vulnerabilities. However, traditional fuzzing suffers from issues such as low coverage and limited diversity in test cases. To address these issues, we propose a way to generate test cases based on dynamic feature libraries and attack models by analysing the characteristics of SQL and XSS. Additionally, we introduce a genetic algorithm to guide the population's evolution by monitoring the state changes of the web application. Furthermore, we improved the selection phase of the genetic algorithm to optimally deform multiple iterations for use cases with low fitness values in order to preserve the population diversity to expand the attack capability of the test cases and based on this the SPAFuzz fuzzy testing tool was implemented. Experimental results show that SPAFuzz is able to detect more network vulnerabilities than Sqlmap and Powerfuzzer.

Cite this paper

APA 7

Jiang, L., & Dong, W. (2024). SPAFuzz: Web Security Fuzz Testing Tool Based on Fuzz Testing and Genetic Algorithm. https://doi.org/10.1109/iccece61317.2024.10504208

MLA 9

Jiang, Lin, and Weiyu Dong. “SPAFuzz: Web Security Fuzz Testing Tool Based on Fuzz Testing and Genetic Algorithm.” 2024, pp. 190–95, https://doi.org/10.1109/iccece61317.2024.10504208.

Chicago

Jiang, Lin, and Weiyu Dong. 2024. “SPAFuzz: Web Security Fuzz Testing Tool Based on Fuzz Testing and Genetic Algorithm.” https://doi.org/10.1109/iccece61317.2024.10504208.

Harvard

Jiang, L. and Dong, W. (2024) ‘SPAFuzz: Web Security Fuzz Testing Tool Based on Fuzz Testing and Genetic Algorithm’. Available at: https://doi.org/10.1109/iccece61317.2024.10504208.

BibTeX

@article{jiang2024spafuzz,
  title = {{SPAFuzz: Web Security Fuzz Testing Tool Based on Fuzz Testing and Genetic Algorithm}},
  author = {Jiang, Lin and Dong, Weiyu},
  pages = {190--195},
  year = {2024},
  doi = {10.1109/iccece61317.2024.10504208}
}

Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.