Right? It was really like the proverbial monkeys typing on a keyboard.ĭr. When they gave these applications random input, they could cause about a third of them to crash.

The story is Professor Bart Miller and his graduate students were looking at the reliability of Unix, Microsoft, and Apple applications and they noticed something kind of funny.

David Brumley: Well, as you said, fuzzing was named about 25 years ago. What is fuzzing or fuzz testing?īill Detwiler: So, David, thanks for joining me, and let’s jump right to it. The following is a transcript of the video edited for readability. Brumley explains what fuzzing is and how companies can use it to help improve both their application security processes and software development cycles. In this exclusive TechRepublic cyber security lesson, Dr. He also built the fuzzing technology that won the DARPA Cyber Grand Challenge. Brumley is a professor at Carnegie Mellon University and CEO of ForAllSecure.

David Brumley, one of best in the digital security business, was kind enough to give me a fuzzing 101 lesson not too long ago, and I can share it with you.ĭr.

The concept of fuzzing or fuzz testing is decades old, but isn’t well known outside of cyber security circles.

Fuzzing tools for windows