Fuzzing: Brute Force Vulnerability Discovery

5. Requirements for Effective Fuzzing

“You teach a child to read, and he or her will be able to pass a literacy test.”

—George W. Bush, Townsend, TN, February 21, 2001

In previous chapters, we introduced various fuzzer classes and different approaches to fuzzing. In this chapter we discuss a variety of tips and techniques that can contribute to more effective and efficient fuzzing. Obvious factors such as planning for test reproducibility and fuzzer reusability should be considered prior to commencing with the development of a fuzzer. This will help ensure that future work can be built on top of, as opposed to in place of, current efforts. Further characteristics that increase fuzzer complexity such as process state and depth, tracking ...