Using Fuzz Testing for Searching Software Vulnerabilities

Bezopasnostʹ Informacionnyh Tehnologij

Timofey Il’ich Komarov¹  Bogdan Leonidovich Kozirsky¹  Michael Aleksandrovich Ivanov¹ 

[1] National Research Nuclear University MEPhI;

关键词: software vulnerabilities;    fuzzing;    Black Box Testing;   

DOI  :  

来源: DOAJ

【 摘 要 】

This article deals with fuzz testing (fuzzing), a software testing and vulnerability searching technique based on providing inputs of programs with random data and further analysis of their behavior. The basics of implementing cmdline argument fuzzer, environment variable fuzzer and syscall fuzzer in any UNIX-like OS have been closely investigated.

【 授权许可】

Unknown