Research on Dynamic Fuzzy Testing in Securing Cloud Infrastructure based on Deep Learning
As cloud infrastructure assumes an increasingly pivotal role in contemporary computing environments, ensuring its security becomes a matter of paramount importance. As a prevalent vulnerability detection technology, traditional fuzz testing encounters the challenge of scalability in the context of the intricate and evolving nature of cloud computing systems. Our approach employs deep neural networks (DNNs) to analyze the behavior of diverse software components within cloud systems. It incorporates multi-dimensional data, including system logs, network traffic, and resource utilization in virtualized environments. The neural network is capable of identifying potential vulnerability points through an automated process. To generate effective test cases, we introduce a reinforcement learning framework based on a policy gradient algorithm. This framework enables an intelligent agent to interact with the system in order to obtain feedback and subsequently update the policy in order to progressively generate more aggressive test cases. The framework is designed with an adaptive reward mechanism that not only encourages triggering crashes but also focuses on edge use cases that reveal system bottlenecks, thereby improving vulnerability coverage. Furthermore, in consideration of the dynamic nature of the cloud environment, we have developed a distributed test architecture that enables the parallel deployment of tasks in virtual machines or containers, simulates multi-tenancy and dynamic load change scenarios, and introduces a vulnerability detection mechanism at the virtualization layer. The proposed model is capable of adaptively generating highly targeted test cases and optimizing the test strategy through continuous learning, thereby markedly enhancing the detection capability of complex vulnerabilities in cloud infrastructure.
Authors
- Lun Zhao (ORCID: https://orcid.org/0000-0001-8293-9094)
- Wenjin Pan
- Ning-yun Dan
- Cai Yan (ORCID: https://orcid.org/0009-0004-0336-6291)
Institutions
- Zhaotong University (CN)
Publication Details
- Published
- 2024-10-11
- DOI
- https://doi.org/10.1109/cbase64041.2024.10824501
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 0.00