Ihr Spezialist für komplexe IT-Systeme
 

I already mentioned the problems with the current fuzzing approaches. But the effectiveness of fuzzers could be improved using some more intelligent techniques.

  • currently fuzzers work mostly by using an black-box approach, it would be interesting to see how much improvement could be done if we use more feedback channels (like log file-correlation, Tracer-Plugins, Plugins for Debuggers etc.)
  • fuzzing is also similar to brute forcing passwords, may be based on the provided feedback we could make more adaptive mutation of requests and anomaly-injections