Upcoming EventsSeptember 2019 Business Meeting & PresentationFuzzing for Security VulnerabilitiesSoftware engineers commonly test our code as part of the development lifecycle. Part of that testing includes testing the inputs of our applications. However, most of the time our inputs are a set of pseudo random inputs. Fuzz testing takes input testing to another level by removing the well-defined input and replacing it with truly random inputs. Targeting an asset with random inputs allow the attacker to find new attack vectors. Creating a bug by finding memory related errors, race conditions or any undefined behavior, gives an attacker the ability to exploit the system in ways you might not have thought of. In this talk, I will give an overview of fuzz testing, how it can be used to find vulnerabilities and demonstrate how it is done. If you want to learn how to do some security vulnerability testing, this talk is for you.
|
|
Image Credit: Kyle Harper