Events

News

Events

How Smart is Intelligent Fuzzing - or - How Stupid is Dumb Fuzzing

August 3, 2007

Charles Miller, presented at Defcon 2007

Abstract

We present a study of two methods of dynamic application analysis: mutation-based fuzzing and generation-based fuzzing. We quantify the differences of these methods by measuring the amount of executed code required to parse PNG image files. Results indicate that generation-based fuzzing can execute 76% more code when compared to mutation-based methods.

Whitepaper

Slides