Research on Dynamic Fuzzy Testing in Securing Cloud Infrastructure based on Deep Learning

As cloud infrastructure assumes an increasingly pivotal role in contemporary computing environments, ensuring its security becomes a matter of paramount importance. As a prevalent vulnerability detection technology, traditional fuzz testing encounters the challenge of scalability in the context of the intricate and evolving nature of cloud computing systems. Our approach employs deep neural networks (DNNs) to analyze the behavior of diverse software components within cloud systems. It incorporates multi-dimensional data, including system logs, network traffic, and resource utilization in virtualized environments. The neural network is capable of identifying potential vulnerability points through an automated process. To generate effective test cases, we introduce a reinforcement learning framework based on a policy gradient algorithm. This framework enables an intelligent agent to interact with the system in order to obtain feedback and subsequently update the policy in order to progressively generate more aggressive test cases. The framework is designed with an adaptive reward mechanism that not only encourages triggering crashes but also focuses on edge use cases that reveal system bottlenecks, thereby improving vulnerability coverage. Furthermore, in consideration of the dynamic nature of the cloud environment, we have developed a distributed test architecture that enables the parallel deployment of tasks in virtual machines or containers, simulates multi-tenancy and dynamic load change scenarios, and introduces a vulnerability detection mechanism at the virtualization layer. The proposed model is capable of adaptively generating highly targeted test cases and optimizing the test strategy through continuous learning, thereby markedly enhancing the detection capability of complex vulnerabilities in cloud infrastructure.

Authors

Institutions

Publication Details

Published
2024-10-11
DOI
https://doi.org/10.1109/cbase64041.2024.10824501
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Research on Dynamic Fuzzy Testing in Securing Cloud Infrastructure based on Deep Learning

Lun Zhao, Wenjin Pan, Ning-yun Dan, Cai Yan
Network Security and Intrusion Detection
article

Research on Dynamic Fuzzy Testing in Securing Cloud Infrastructure based on Deep Learning

Lun Zhao, Wenjin Pan, Ning-yun Dan, Cai Yan
article en

Abstract

As cloud infrastructure assumes an increasingly pivotal role in contemporary computing environments, ensuring its security becomes a matter of paramount importance. As a prevalent vulnerability detection technology, traditional fuzz testing encounters the challenge of scalability in the context of the intricate and evolving nature of cloud computing systems. Our approach employs deep neural networks (DNNs) to analyze the behavior of diverse software components within cloud systems. It incorporates multi-dimensional data, including system logs, network traffic, and resource utilization in virtualized environments. The neural network is capable of identifying potential vulnerability points through an automated process. To generate effective test cases, we introduce a reinforcement learning framework based on a policy gradient algorithm. This framework enables an intelligent agent to interact with the system in order to obtain feedback and subsequently update the policy in order to progressively generate more aggressive test cases. The framework is designed with an adaptive reward mechanism that not only encourages triggering crashes but also focuses on edge use cases that reveal system bottlenecks, thereby improving vulnerability coverage. Furthermore, in consideration of the dynamic nature of the cloud environment, we have developed a distributed test architecture that enables the parallel deployment of tasks in virtual machines or containers, simulates multi-tenancy and dynamic load change scenarios, and introduces a vulnerability detection mechanism at the virtualization layer. The proposed model is capable of adaptively generating highly targeted test cases and optimizing the test strategy through continuous learning, thereby markedly enhancing the detection capability of complex vulnerabilities in cloud infrastructure.

Zhaotong University (CN)
Industry, innovation and infrastructure
Openalex Percentile: Top 70%
Network Security and Intrusion Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.