In this paper, we introduce a comprehensive approach to bolstering the security, reliability, and comprehensibility of OpenAirInterface5G (OAI5G), an open-source software framework for the exploration, development, and testing of 5G wireless communication systems. Firstly, we employ AFL++, a powerful fuzzing tool, to fuzzy-test OAI5G with respect to its configuration files rigorously. This extensive testing process helps identify errors, defects, and security vulnerabilities that may evade conventional testing methods. Secondly, we harness the capabilities of Large Language Models such as Google Bard to automatically decipher and document the meanings of parameters within the OAI5G codebase that are used in fuzzing. This automated parameter interpretation streamlines subsequent analyses and facilitates more informed decision-making. Together, these two techniques contribute to fortifying the OAI5G system, making it more robust, secure, and understandable for developers and analysts alike.
翻译:本文提出了一种综合方法,用以增强OpenAirInterface5G(OAI5G)的安全性、可靠性和可理解性——这是一套用于探索、开发和测试5G无线通信系统的开源软件框架。首先,我们利用强大的模糊测试工具AFL++,对其配置文件进行严格模糊测试。这一广泛的测试流程有助于识别可能规避传统测试方法的错误、缺陷和安全漏洞。其次,我们借助Google Bard等大语言模型的能力,自动解码并记录OAI5G代码库中用于模糊测试的参数含义。这种自动化参数解释简化了后续分析流程,并促进了更明智的决策。这两种技术共同致力于强化OAI5G系统,使其对开发者和分析人员而言更加稳健、安全且易于理解。