Institute for Information Industry

Chia-Wei Tien

Chin-Wei Tien

Pei-Yi Lin

Chih-Hung Lin

Tse-Yung Huang

Chih-Wei Chen

Ting-Chun Huang

Zhi-Wei Chen

Tsung-Ta Tsai

A fuzz testing apparatus transmits a plurality of packets to the device under test (DUT), and calculates a probability of abnormal state, a normal response time and an abnormal-state-processing time of the DUT for the packets. Then, the fuzz testing apparatus estimates a maximum quantity of packets that can be sent to the DUT according to the probability of abnormal state the normal response time and the abnormal-state-processing time corresponding to the standby time of the DUT. Finally, the fuzz testing apparatus determines a plurality of test packets from a plurality of candidate test packets according to the maximum quantity of packets.

Fuzz testing apparatus and fuzz testing method

A system for producing test data produces fuzzing data at least according to first test data which is used for testing at least one first device and second test data which is used for testing a second device. Then, the system transmits the fuzzing data to the second device so as to test the second device.

System and method for producing test data

A device for producing test data stores a plurality of simulated test data each of which substantially conforms to the data format accepted by a device under test (DUT). The data format includes different data blocks. The device for producing test data also mutates each of the simulated test data in one of a plurality of mutation forms to generate a plurality of first test data for testing the DUT. Each of the mutation forms refers to mutating one of the data blocks in one of a plurality of mutation ways.

Device and method for producing test data

A computer device and a method of identifying whether container behavior thereof is abnormal are provided. The computer device detects container behavior of a container in a time interval, and identifies whether the container behavior of the container is abnormal according to a container behavior identification module, thereby determining whether there is an intrusion. In addition, a decoy container can be installed in the computer device to attract attacking or invading from a third party so as to reduce the risk of the container being attacked, and the container behavior identification module can be updated according to the container behavior of the decoy container.

Computer device and method of identifying whether container behavior thereof is abnormal

A detection system and method thereof are provided. The detection method comprises the following steps: decompiling a first application package file to generate a plurality of first decompiled files, and the first decompiled files comprising a first decompiled code; comparing the first decompiled code with a second decompiled code of a second application package file to analyze a different code segment between the first decompiled code and the second decompiled code; classifying a changed code type corresponding to the different code segment according to a function call flow of the first decompiled code; loading a correspondence table and selecting at least one detection rule corresponding to the changed code type in the correspondence table; confirming a detection region of the first decompiled code according to the at least one detection rule; and detecting the detection region to generate a security detection result.

Detection system and method thereof

A virtual machine monitoring method used in a virtual machine monitoring system is provided. The virtual machine monitoring method includes retrieving a hypercall transmitted from one of a plurality of virtual machines to a hypervisor of a virtual machine monitoring system, wherein the hypercall is used for establishing a channel between a source virtual machine and a target virtual machine. A central control virtual machine ID information in the hypervisor is retrieved. A type of the channel established by the hypercall is determined according to the central control virtual machine ID information and channel-establishing information corresponding to the hypercall. When the channel is a private channel that is not related to a central control virtual machine of the virtual machines, a security module is used to monitor the private channel.

Growing community of inventors

Taipei, Taiwan

Chia-Wei Tien