Fuzzing: Brute Force Vulnerability Discovery

版权声明：原创作品，允许转载，转载时请务必以超链接形式标明文章原始出版、作者信息和本声明。否则将追究法律责任。 http://blog.youkuaiyun.com/topmvp - topmvp
Master One of Todays Most Powerful Techniques for Revealing Security Flaws!

Fuzzing has evolved into one of todays most effective approaches to test software security. To fuzz, you attach a programs inputs to a source of random data, and then systematically identify the failures that arise. Hackers have relied on fuzzing for years: Now, its your turn. In this book, renowned fuzzing experts show you how to use fuzzing to reveal weaknesses in your software before someone else does.

Fuzzing is the first and only book to cover fuzzing from start to finish, bringing disciplined best practices to a technique that has traditionally been implemented informally. The authors begin by reviewing how fuzzing works and outlining its crucial advantages over other security testing methods. Next, they introduce state-of-the-art fuzzing techniques for finding vulnerabilities in network protocols, file formats, and web applications; demonstrate the use of automated fuzzing tools; and present several insightful case histories showing fuzzing at work. Coverage includes:

*Why fuzzing simplifies test design and catches flaws other methods miss
*The fuzzing process: from identifying inputs to assessing exploitability
*Understanding the requirements for effective fuzzing
*Comparing mutation-based and generation-based fuzzers
*Using and automating environment variable and argument fuzzing
*Mastering in-memory fuzzing techniques
*Constructing custom fuzzing frameworks and tools
*Implementing intelligent fault detection

http://rapidshare.com/files/119698361/0321446119.rar