Dynamic Analysis (Fuzzing)
- •
def
- •
sending random, unexpected input to an application (fault-injecting, robustness testing, negative testing) and watching for something abnormal — a crash, server error, or exception
- •
- •
history
- •
originated from a 1988 University of Wisconsin class project ("Operating System Utility Program Reliability") by Professor Barton Miller — the "Fuzz Generator"
- •
- •
note
- •
very time and processor-intensive, since it requires many, many iterations; dedicated fuzzing frameworks exist (e.g., CERT's Basic Fuzzing Framework)
- •
- •