This chapter presents an approach for improving fuzz testing coverage by using Agent instrumentation. It explains how Agent instrumentation can be used to improve fuzz testing, including how additional information can be collected on the system under test (SUT) and used to determine whether there are exceptions. Fuzz testing is deeply integrated in the software development process and has proven to be an effective technique to quickly detect bugs and unknown vulnerabilities. The target systems in such industries are typically relatively easy to instrument, generally using in‐band instrumentation where the same protocol being fuzzed is observed to detect exceptions. The chapter discusses the challenges of fuzz testing rich operating system embedded systems. It reviews several undetectable issues on the SUT. To overcome these challenges, the chapter presents a solution based on the Agent Instrumentation Framework and highlights some examples of exceptions that would not have been detected unless Agent instrumentation is used.
Improving Fuzz Testing Coverage by Using Agent Instrumentation
Building Secure Cars ; 179-209
2021-05-17
31 pages
Aufsatz/Kapitel (Buch)
Elektronische Ressource
Englisch
Integrating Fuzz Testing into the Cybersecurity Validation Strategy
SAE Technical Papers | 2021
|Integrating Fuzz Testing into the Cybersecurity Validation Strategy
British Library Conference Proceedings | 2021
|Processing Fuzz Testing Results into an Evidence Report
SAE Technical Papers | 2023
|Integrating Fuzz Testing into a CI Pipeline for Automotive Systems
British Library Conference Proceedings | 2022
|Fuzz Testing Virtual ECUs as Part of the Continuous Security Testing Process
SAE Technical Papers | 2020
|