Fuzzy analysis
Fuzzy analysis is a hardcore software testing technique used by the auditors and developers to test their applications against unexpected, invalid, and random set of data inputs. The reaction will then be noticed in terms of exception or crash thrown by these applications. This activity uncovers some of the major vulnerabilities in the software, which otherwise are not possible to discover. These include buffer overflows, format strings, code injections, dangling pointers, race conditions, denial of service conditions, and many other types of vulnerabilities. There are different classes of fuzzers available under BackTrack which can be used to test the file formats, network protocols, command-line inputs, environmental variables, ...
Get BackTrack 4: Assuring Security by Penetration Testing now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.