Automatic synthesis of unit tests for security testing
Performing security analysis on a computer program under test (CPUT). The CPUT can be analyzed to identify data pertinent to potential security vulnerabilities of the CPUT. At least a first unit test configured to test a particular unit of program code within the CPUT can be automatically synthesized. The first unit test can be configured to initialize at least one parameter used by the particular unit of program code within the CPUT, and can be provided at least a first test payload configured to exploit at least one potential security vulnerability of the CPUT. The first unit test can be dynamically processed to communicate the first test payload to the particular unit of program code within the CPUT. Whether the first test payload exploits an actual security vulnerability of the CPUT can be determined, and a security analysis report can be output.
1. A computer-implemented method of performing security analysis on a computer program under test (CPUT), comprising:
analyzing the CPUT to identify data pertinent to security vulnerabilities of the CPUT;
automatically synthesizing, based upon the identified data, a first unit test configured to test a particular unit of program code within the CPUT;
dynamically processing the first unit test to communicate a first test payload to the particular unit of program code within the CPUT; and
determining whether the first test payload exploits an actual security vulnerability of the CPUT, wherein
the first test payload is configured to exploit a potential security vulnerability of the CPUT.
2. The method of claim 1 , wherein
the determining includes analyzing processes executed by the CPUT while the CPUT processes the first test payload.
3. The method of claim 1 , wherein
the dynamically processing includes communicating, to the CPUT, an artificial Hypertext Transfer Protocol (HTTP) request including the first test payload.
4. The method of claim 3 , further comprising:
receiving, from the CPUT, a HTTP response to the artificial HTTP request, wherein
the determining includes analyzing the HTTP response.
5. The method of claim 3 , further comprising:
receiving, from the CPUT, a HTTP response to the artificial HTTP request;
analyzing the HTTP response to identify additional data pertinent to security vulnerabilities of the CPUT;
automatically synthesizing, based upon the identified additional data, a second unit test configured to test the CPUT; and
dynamically processing the second unit test to communicate a second test payload to the CPUT.
6. The method of claim 3 , wherein
the first unit test automatically generates the artificial HTTP request and communicates the artificial HTTP request to the CPUT.
7. The method of claim 1 , wherein
the analyzing includes performing a static analysis of the CPUT.
8. The method of claim 7 , wherein
the static analysis includes:
analyzing program code of the CPUT related to receiving Hypertext Transfer Protocol (HTTP) requests; and
analyzing program code of the CPUT related to processing HTTP requests.
9. A computer hardware system configured to perform security analysis on a computer program under test (CPUT), comprising:
at least one hardware processor, wherein the at least one hardware processor is configured to initiate and/or perform:
analyzing the CPUT to identify data pertinent to security vulnerabilities of the CPUT;
automatically synthesizing, based upon the identified data, a first unit test configured to test a particular unit of program code within the CPUT;
dynamically processing the first unit test to communicate a first test payload to the particular unit of program code within the CPUT; and
determining whether the first test payload exploits an actual security vulnerability of the CPUT, wherein
the first test payload is configured to exploit a potential security vulnerability of the CPUT.
10. The system of claim 9 , wherein
the determining includes analyzing processes executed by the CPUT while the CPUT processes the first test payload.
11. The system of claim 9 , wherein
the dynamically processing includes communicating, to the CPUT, an artificial Hypertext Transfer Protocol (HTTP) request including the first test payload.
12. The system of claim 11 , wherein the at least one hardware processor is further configured to initiate and/or perform:
receiving, from the CPUT, a HTTP response to the artificial HTTP request, wherein
the determining includes analyzing the HTTP response.
13. The system of claim 11 , wherein the at least one hardware processor is further configured to initiate and/or perform:
receiving, from the CPUT, a HTTP response to the artificial HTTP request;
analyzing the HTTP response to identify additional data pertinent to security vulnerabilities of the CPUT;
automatically synthesizing, based upon the identified additional data, a second unit test configured to test the CPUT; and
dynamically processing the second unit test to communicate a second test payload to the CPUT.
14. The system of claim 11 , wherein
the first unit test automatically generates the artificial HTTP request and communicates the artificial HTTP request to the CPUT.
15. A computer program product, comprising:
a computer readable storage device having stored therein computer usable program code for performing security analysis on a computer program under test (CPUT),
the computer usable program code, which when executed by a computer hardware system, causes the computer hardware system to perform:
analyzing the CPUT to identify data pertinent to security vulnerabilities of the CPUT;
automatically synthesizing, based upon the identified data, a first unit test configured to test a particular unit of program code within the CPUT;
dynamically processing the first unit test to communicate a first test payload to the particular unit of program code within the CPUT; and
determining whether the first test payload exploits an actual security vulnerability of the CPUT, wherein
the first test payload is configured to exploit a potential security vulnerability of the CPUT, and
the computer readable storage device is not a transitory, propagating signal per se.
16. The computer program product of claim 15 , wherein
the determining includes analyzing processes executed by the CPUT while the CPUT processes the first test payload.
17. The computer program product of claim 15 , wherein
the dynamically processing includes communicating, to the CPUT, an artificial Hypertext Transfer Protocol (HTTP) request including the first test payload.
18. The computer program product of claim 17 , wherein the computer usable program code further causes the computer hardware system to perform:
receiving, from the CPUT, a HTTP response to the artificial HTTP request, wherein
the determining includes analyzing the HTTP response.
19. The computer program product of claim 17 , wherein the computer usable program code further causes the computer hardware system to perform:
receiving, from the CPUT, a HTTP response to the artificial HTTP request;
analyzing the HTTP response to identify additional data pertinent to security vulnerabilities of the CPUT;
automatically synthesizing, based upon the identified additional data, a second unit test configured to test the CPUT; and
dynamically processing the second unit test to communicate a second test payload to the CPUT.
20. The computer program product of claim 17 , wherein
the first unit test automatically generates the artificial HTTP request and communicates the artificial HTTP request to the CPUT.