This chapter presents an approach for improving fuzz testing coverage by using Agent instrumentation. It explains how Agent instrumentation can be used to improve fuzz testing, including how additional information can be collected on the system under test (SUT) and used to determine whether there are exceptions. Fuzz testing is deeply integrated in the software development process and has proven to be an effective technique to quickly detect bugs and unknown vulnerabilities. The target systems in such industries are typically relatively easy to instrument, generally using in‐band instrumentation where the same protocol being fuzzed is observed to detect exceptions. The chapter discusses the challenges of fuzz testing rich operating system embedded systems. It reviews several undetectable issues on the SUT. To overcome these challenges, the chapter presents a solution based on the Agent Instrumentation Framework and highlights some examples of exceptions that would not have been detected unless Agent instrumentation is used.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Improving Fuzz Testing Coverage by Using Agent Instrumentation


    Contributors:

    Published in:

    Publication date :

    2021-05-17


    Size :

    31 pages




    Type of media :

    Article/Chapter (Book)


    Type of material :

    Electronic Resource


    Language :

    English




    Integrating Fuzz Testing into the Cybersecurity Validation Strategy

    Vinzenz, Nico / Oka, Dennis Kengo | British Library Conference Proceedings | 2021


    Integrating Fuzz Testing into the Cybersecurity Validation Strategy

    Oka, Dennis Kengo / Vinzenz, Nico | SAE Technical Papers | 2021


    Processing Fuzz Testing Results into an Evidence Report

    Oka, Dennis Kengo / Vinzenz, Nico | SAE Technical Papers | 2023


    Integrating Fuzz Testing into a CI Pipeline for Automotive Systems

    Oka, Dennis Kengo / Vinzenz, Nico | British Library Conference Proceedings | 2022


    Integrating Fuzz Testing into a CI Pipeline for Automotive Systems

    Oka, Dennis Kengo / Vinzenz, Nico | British Library Conference Proceedings | 2022