APPLICATION SECURITY BOOK EXCERPTS
Fuzzing: Brute Force Vulnerability Discovery -- Chapter 12, Fuzzing Frameworks
Michael Sutton, Adam Greene and Pedram Amini
06.14.2007
Rating: --- (out of 5)
As a registered member of SearchSoftwareQuality.com, you're entitled to a complimentary copy of Chapter 12 of Fuzzing: Brute Force Vulnerability Discovery written by Michael Sutton, Adam Greene, and Pedram Amini and published by Addison-Wesley.
Although fuzzers are effective against a wide range of common applications, we often have a need for more customization and thorough fuzzing for proprietary and previously untested protocols. This is where fuzzing frameworks become extremely useful. In this chapter, "Fuzzing Frameworks," the authors explore a number of open source fuzzing frameworks, including SPIKE, Autodafé and GPF.
[IMAGE]
Book description:
Fuzzing has evolved into one of today's most effective approaches to test software security. To "fuzz," you attach a program's inputs to a source of random dat...
To continue reading for free, register below or login
To read more you must become a member of SearchSoftwareQuality.com
 |
 |
| |
RELATED CONTENT
 |
Security Methods |
|
Fuzzing for Software Security Testing and Quality Assurance: Chapter 3, Testing for Quality
|
|
Software Security Engineering: A Guide for Project Managers -- Chapter 3, Requirements Engineering for Secure Software
|
|
Google Hacking for Penetration Testers, Volume 2: Chapter 6, Locating Exploits and Finding Targets
|
|
Ajax Security -- Chapter 6, Transparency in Ajax Applications
|
|
Static Analysis as Part of the Code Review Process -- Chapter 3, Secure Programming with Static Analysis
|
|
Security Metrics: Replacing Fear, Uncertainty, and Doubt -- Chapter 3, Application Security Metrics
|
|
Forms Authentication -- Chapter 5, Professional ASP.NET 2.0 Security, Membership, and Role Management
|
|
Securing JavaServer Faces Applications -- Chapter 15, JavaServer Faces: The Complete Reference
|
|
Hacking for Dummies -- Chapter 16, Web applications
|
|
Penetration testing techniques -- Chapter 6, Professional Pen Testing for Web Applications
|
|
a, and then systematically identify the failures that arise. Hackers have relied on fuzzing for years: Now, it's your turn. In this book, renowned fuzzing experts show you how to use fuzzing to reveal weaknesses in your software before someone else does.
Fuzzing is the first and only book to cover fuzzing from start to finish, bringing disciplined best practices to a technique that has traditionally been implemented informally. The authors begin by reviewing how fuzzing works and outlining its crucial advantages over other security testing methods. Next, they introduce state-of-the-art fuzzing techniques for finding vulnerabilities in network protocols, file formats, and Web applications; demonstrate the use of automated fuzzing tools; and present several insightful case histories showing fuzzing at work.
>> Read "Fuzzing Frameworks" now.
>> Buy the book
|
|
|
|
|
|
