Patent ID: 9654490
Date: 2017-05-16
CPC Classifications: G06F,H04L

Claim:
1. A system for fuzzing a network application program, comprising: a fuzzing performance client program generator for generating a packet to be transmitted from a captured packet, applying a fuzzing rule to the packet to be transmitted, and outputting a resulting packet; and a fuzzing supervisor program provider for providing the packet from the fuzzing performance client program generator to a target program to be fuzzed, monitoring an event and abnormal termination of the target program to be fuzzed, and analyzing a situation of termination to verify security vulnerabilities if abnormal termination has occurred, wherein the fuzzing performance client program generator comprises: a captured packet database (DB) for storing packets captured from content communicated by the target program to be fuzzed; a packet generator for loading the captured packet stored in the captured packet DB, and generating the packet to be transmitted; a fuzzing rule DB for storing fuzzing rules required to apply malformation for fuzzing to the packet generated by the packet generator; and a fuzzing rule applier for applying a corresponding fuzzing rule stored in the fuzzing rule DB to the packet generated by the packet generator, and outputting a resulting packet, wherein the fuzzing supervisor program provider is installed on a server computer and operated in a form of a local proxy, and wherein the fuzzing performance client program generator is installed on a client computer.