Fuzzing methods and tools

Dejan Lukan (2012) Fuzzing methods and tools. EngD thesis.

Preview

Abstract

In the thesis we presented the topic on computer security and it’s importance in the modern world. First, we defined the concept of vulnerability and types of vulnerabilities in computer applications. Then we glanced over the area of vulnerability detection in software and described the methods known today. After that we described methods and procedures used in negative testing, which is just one of the methods of vulnerability testing. We found the most interesting tools for negative testing and applied them to a sample program Vulnserver and real server programs. We compared the tools Peach and Sulley regarding the performance of vulnerability detection. Finally, we presented how a malicious attacker could exploit found vulnerabilities and take complete control of the attacked computer.

Item Type:

Thesis (EngD thesis)

Keywords:

security, vulnerability, types of vulnerabilities, methods for vulnerability detection, negative testing, exploiting and taking over the system

Number of Pages:

Language of Content:

Slovenian

Mentor / Comentors:

Name and Surname	ID	Function
doc. dr. Mojca Ciglarič	256	Mentor

Link to COBISS:

http://www.cobiss.si/scripts/cobiss?command=search&base=50070&select=(ID=00009389140)

Institution:

University of Ljubljana

Department:

Faculty of Computer and Information Science

Item ID:

1791

Date Deposited:

10 Sep 2012 10:50

Last Modified:

24 Sep 2012 10:08

URI:

http://eprints.fri.uni-lj.si/id/eprint/1791

Actions (login required)

View Item