Fuzzing : Brute Force Vulnerability Discovery / Sutton, Michael.

Author
Edition
  • 1st edition
Published
  • Addison-Wesley Professional 2007
Physical description
576 p.
ISBN
  • 9780321446114
  • 0321446119
  • 9780321446114
Notes
  • Includes bibliographical references and index.
  • Reproduction available: Electronic reproduction. Boston, MA : Safari, Available via World Wide Web. 2007.
  • Mode of access: World Wide Web.
  • Made available through: Safari, an O’Reilly Media Company.
  • Online resource; Title from title page (viewed June 29, 2007)
Genre
  • Electronic books.
  • text
Language
  • English

Summary

  • FUZZING Master One of Today’s Most Powerful Techniques for Revealing Security Flaws! Fuzzing has evolved into one of today’s most effective approaches to test software security. To “fuzz,” you attach a program’s inputs to a source of random data, and then systematically identify the failures that arise. Hackers have relied on fuzzing for years: Now, it’s your turn. In this book, renowned fuzzing experts show you how to use fuzzing to reveal weaknesses in your software before someone else does. Fuzzing is the first and only book to cover fuzzing from start to finish, bringing disciplined best practices to a technique that has traditionally been implemented informally. The authors begin by reviewing how fuzzing works and outlining its crucial advantages over other security testing methods. Next, they introduce state-of-the-art fuzzing techniques for finding vulnerabilities in network protocols, file formats, and web applications; demonstrate the use of automated fuzzing tools; and present several insightful case histories showing fuzzing at work. Coverage includes: • Why fuzzing simplifies test design and catches flaws other methods miss • The fuzzing process: from identifying inputs to assessing “exploitability” • Understanding the requirements for effective fuzzing • Comparing mutation-based and generation-based fuzzers • Using and automating environment variable and argument fuzzing • Mastering in-memory fuzzing techniques • Constructing custom fuzzing frameworks and tools • Implementing intelligent fault detection Attackers are already using fuzzing. You should, too. Whether you’re a developer, security engineer, tester, or QA specialist, this book teaches you how to build secure software. Foreword     xix Preface        xxi Acknowledgments  xxv About the Author   xxvii P ARTI         B ACKGROUND     1 Chapter 1    Vulnerability Discovery Methodologies  3 Chapter 2    What Is Fuzzing?   21 Chapter 3    Fuzzing Methods and Fuzzer Types     33 Chapter 4    Data Representation and Analysis        45 Chapter 5    Requirements for Effective Fuzzing      61 P ART II      T ARGETS AND A UTOMATION          71 Chapter 6    Automation and Data Generation        73 Chapter 7    Environment Variable and Argument Fuzzing 89 Chapter 8    Environment Variable and Argument Fuzzing: Automation 103 Chapter 9    Web Application and Server Fuzzing     113 Chapter 10  Web Application and Server Fuzzing: Automation    137 Chapter 11  File Format Fuzzing         1...

Summary holdings does not include live availability details. Select a library name for the full Holdings display.

Location of copy Shelfmark Online location Holdings Notes
British Library: General Reference Collection, St Pancras Reading Rooms YK.2008.a.14667
British Library Table of contents only Online location
University of Cambridge Libraries Table of contents only Online location
University of Cambridge Libraries: University Library: Order from Library Storage Facility (Not borrowable)
Coventry University: Ground Floor 005.8 SUT
Glasgow Caledonian University Online location Connect to this resource online
Glasgow Caledonian University Online location
Leeds Beckett University Library: Contact Leeds Beckett University Library 005.8 SUT
National Library of Scotland Table of contents only Online location
National Library of Scotland: General Reading Room, Edinburgh (stored offsite) PB8.207.657/6
National Library of Wales / Llyfrgell Genedlaethol Cymru Table of contents only Online location
National Library of Wales / Llyfrgell Genedlaethol Cymru: Contact the National Library of Wales / Llyfrgell Genedlaethol Cymru PRINT 2008 MB 12716
Northumbria University Library Table of contents only Online location
Northumbria University Library: City Campus Library, Floor 1 005.8 SUT
University of Oxford Libraries Table of contents only Online location
University of Oxford Libraries: Radcliffe Science Library 08.E00765 (Box B000001084641)
Queen Mary University of London Library Table of contents only Online location
Queen Mary University of London Library: Mile End Library QA64.45 SUT (ONEWEEK) ONEWEEK
Queen Mary University of London Library: Mile End Library QA64.45 SUT ONEWEEK
Royal Holloway, University of London: Royal Holloway library Davison General Three Week 005.8 SUT
Royal Holloway, University of London: Contact the Library ProQuest Safari Books Online
University of Salford: Clifford Whitworth Library 005.8 SUT
Sheffield Hallam University Library: Adsetts Main Collection 005.8 SU (LEVEL 2)
Sheffield Hallam University Library Online location Connect to this resource online
Sheffield Hallam University Library Online location Safari books online
University of South Wales Table of contents only Online location
University of South Wales: Treforest Library: Main Shelves, Week Loan 005.8 SUT
Trinity College Dublin Library Table of contents only Online location
Trinity College Dublin Library: Ussher Library PL-479-753
UCL Library Services Online location
UCL Library Services Online location

Export: