Methods and systems of testing interfaces of computer storage for storage vulnerabilities

A computer system for testing interfaces of a computer storage of the computer system for storage system vulnerabilities comprising a memory having computer executable instructions;

• and a processor for executing the computer executable instructions, the computer executable instructions including:
• generating, by the computer system, a plurality of first test templates, wherein generating the plurality of first test templates includes generating a first test template for each contiguous parameter area of a plurality of parameter area interfaces for a given system service's interface for vulnerabilities regarding storage protection keys by replacing, by the system, each contiguous parameter area of the plurality of parameter area interfaces with unauthorized parameters to generate expected failures;
• generating, by the computer system, a plurality of second test templates, wherein the generating of the plurality of second test templates includes generating a second test template for each variable-length parameter area of the plurality of parameter area interfaces having variable-length fields for vulnerabilities regarding buffer overflows in an attempt to access a protected storage area beyond an unprotected storage area with a larger length field to generate expected failures;
• generating, by the computer system, a plurality of third test templates, wherein the generating of the plurality of third test templates includes generating a third test template for each control block of a plurality of control blocks to replicate copies and verify the replicated copies through an independently anchored chain that will generate expected failures from the system service's validation;
• processing, by the computer system, the plurality of first test templates, the plurality of second test templates, the plurality of third test templates, and the plurality of parameter area interfaces, wherein the processing includes making, by the computer system copies of the plurality of parameter area interfaces before iteratively replacing each with authorized-key, fetch-protected storage and subsequently replacing each with large variable length values;
• after making the copies, executing, by the computer system, one or more tests for each first template of the plurality of first templates, each second template of the plurality of second templates, and each third template of the third plurality of templates;
• and
• summarizing, by the computer system, results of the tests executed and returning an overall return code based on summarized results of the tests.

A computer program product comprising a computer readable storage medium having computer executable instructions for testing interfaces of a computer storage of a computer system for storage system vulnerabilities embodied therewith, when executed by a processor of the computer system, the computer executable instructions cause the processor to perform:

• generating, by the computer system, a plurality of first test templates, wherein generating the plurality of first test templates includes generating a first test template for each contiguous parameter area of a plurality of parameter area interfaces for a given system service's interface for vulnerabilities regarding storage protection keys by replacing, by the system, each contiguous parameter area of the plurality of parameter area interfaces with unauthorized parameters to generate expected failures;
• generating, by the computer system, a plurality of second test templates, wherein the generating of the plurality of second test templates includes generating a second test template for each variable-length parameter area of the plurality of parameter area interfaces having variable-length fields for vulnerabilities regarding buffer overflows in an attempt to access a protected storage area beyond an unprotected storage area with a larger length field to generate expected failures;
• generating, by the computer system, a plurality of third test templates, wherein the generating of the plurality of third test templates includes generating a third test template for each control block of a plurality of control blocks to replicate copies and verify the replicated copies through an independently anchored chain that will generate expected failures from the system service's validation;
• processing, by the computer system, the plurality of first test templates, the plurality of second test templates, the plurality of third test templates, and the plurality of parameter area interfaces, wherein the processing includes making, by the computer system, copies of the plurality of parameter area interfaces before iteratively replacing each with authorized-key, fetch-protected storage and subsequently replacing each with large variable length values;
• after making the copies, executing, by the computer system, one or more tests for each first template of the plurality of first templates, each second template of the plurality of second templates, and each third template of the third plurality of templates;
• and
• summarizing, by the computer system, results of the tests executed and returning an overall return code based on summarized results of the tests.