关键词: 有限状态机, 路由协议, 模糊测试, 漏洞挖掘

Abstract: The security of BGP-4 routing protocol is of great significance to ensure the safety and reliability of the whole network. The existing fuzzing methods are difficult to test states and reduce redundant cases when testing BGP-4 protocol. In order to solve these problems, this paper proposes a method for BGP-4 protocol based on finite state machine, and designs the TSGF（Test Sequences Generation for Fuzzing） algorithm to generate test sequences. Meanwhile it proposes a TCGVF（Test Cases Generation based on Vulnerable Fields） algorithm to efficiently generate test cases. In the final, it develops a prototype system called BFuzzer, and experimental results show BFuzzer can effectively discover BGP-4 protocol vulnerabilities.

Key words:  finite state machine, routing protocol, fuzzing test, vulnerability mining