agroce

3 ms·

1. 1.▲
   by agroce 6y ago

   https://blog.trailofbits.com/2019/01/22/fuzzing-an-api-with-... provides a little more friendly way (with delta-debugging and save/replay, and ability to use more fuzzers) to do this, via DeepState
2. 2.▲
   by agroce 7y ago

   If you want to fuzz a library by making a series of calls, DeepState has special support for that, but that won't handle some other issues with network applications of course.
3. 3.▲
   by agroce 8y ago

   Good point! I added a little paragraph emphasizing the reasons you want libFuzzer etc. over a dumb fuzzer, in the long run.
4. 4.▲
   by agroce 11y ago

   The SPLASH Onward! 2014 essay concludes with this advice to practitioners: In some cases where coverage is currently used, there is little real substitute for it; test suite size alone is not a very helpful measure of testing effort, since
5. 5.▲
   by agroce 11y ago

   I'm biased (it's my research field, in part) but I'd suggest that studies on coverage are all over the place, with this one showing lack of correlation, and other studies showing good correlation between coverage and... some