3 ms·
> It turns out pretty much every fuzzer evaluation to date has not been statistically rigorous. Shall I tell you a not so well hidden secret? Almost nothing pu
by hannob 8y ago
> It turns out pretty much every fuzzer evaluation to date has not been statistically rigorous.
Shall I tell you a not so well hidden secret? Almost nothing published in computer science, let alone in IT security, is statistically rigorous.
- Ar-Curunir 8y agoThat's not true; plenty of papers in the systems field perform careful and rigorous experiments. This doesn't even include the theory side of stuff, where you only have proofs, and no statistics to get wrong.