Software Testing

(3) Random Testing

What is Black-Box Fuzzing?

  • Generate inputs for target program without knowledge of its internal behavior or implementation
  • Target program checked for observable program crashes
  • Doesn't reach deeper parts of the code
  • Mostly used when no sources are available or no instrumentation is possible (e.g. 3rd-party software)
  • Results strongly depend on seeds

Diskussion