一句话:提出 Sedar,通过跨 DBMS SQL 迁移为缺少测试用例的 DBMS 生成高质量模糊测试种子。
有效 DBMS 模糊测试依赖高质量初始种子,种子需覆盖多种 DBMS 特性以充分探索状态空间;然而许多 DBMS 缺少全面测试用例,导致最先进的模糊测试技术难以直接应用。Sedar 提出通过跨 DBMS 的 SQL 迁移来获取高质量种子:将其他 DBMS 中可用的 SQL 语句或测试用例迁移为目标 DBMS 的初始种子,从而弥补测试用例不足。该工作针对 DBMS 模糊测试的种子生成阶段,目标是提升种子的特性覆盖与可移植性。摘要未给出具体实验数据,评估应关注迁移种子在 DBMS 模糊测试中的覆盖率与漏洞发现效果。
Effective DBMS fuzzing relies on high-quality initial seeds, which serve as the starting point for mutation. These initial seeds should incorporate various DBMS features to explore the state space thoroughly. While built-in test cases are typically used as initial seeds, many DBMSs lack comprehensive test cases, making it difficult to apply state-of-the-art fuzzing techniques directly.