Online social networks have become an integral aspect of our daily lives and play a crucial role in shaping our relationships with others. However, bugs and glitches, even minor ones, can cause anything from frustrating problems to serious data leaks that can have far-reaching impacts on millions of users. To mitigate these risks, fuzz testing, a method of testing with randomised inputs, can provide increased confidence in the correct functioning of a social network. However, implementing traditional fuzz testing methods can be prohibitively difficult or impractical for programmers outside of the network's development team. To tackle this challenge, we present Socialz, a novel approach to social fuzz testing that (1) characterises real users of a social network, (2) diversifies their interaction using evolutionary computation across multiple, non-trivial features, and (3) collects performance data as these interactions are executed. With Socialz, we aim to provide anyone with the capability to perform comprehensive social testing, thereby improving the reliability and security of online social networks used around the world.
翻译:在线社交网络已成为我们日常生活不可或缺的一部分,并在塑造人际关系中发挥关键作用。然而,即使是微小的错误和故障,也可能导致从令人沮丧的问题到严重的数据泄露,对数百万用户产生深远影响。为降低这些风险,模糊测试——一种基于随机输入的方法——能够提升社交网络正常运行的置信度。然而,对非网络开发团队的程序员而言,实施传统模糊测试方法可能极为困难或不切实际。为解决这一挑战,我们提出Socialz,一种新颖的社交模糊测试方法,该方法:(1)刻画社交网络真实用户特征;(2)通过进化计算在多项重要特征上多样化用户交互;(3)收集这些交互执行时的性能数据。借助Socialz,我们旨在赋予任何人执行全面社交测试的能力,从而提升全球范围内在线社交网络的可靠性与安全性。