Fuzzing

Fuzzing or fuzz testing is a strategy that provides random data to the input of a software application. If the program happens to fail from a crash, the flaws can be documented. While fuzzing is often associated with mutation analysis, there are significant differences. Fuzzing transmits data that isn’t necessarily mapped to anything within the target as other data may inflict damage. Mutation analysis is a process that thoroughly models the structure, state and semantics of the protocol used and maximizes the amount of damage that can be inflicted in the shortest amount of time. In this regard, fuzzing can be considered as a basic form of testing with mutation analysis being a more advanced version. Fuzzing provides advantages as it’s test design is rather simple with no preconceptions concerning system behavior. Fuzzing was first developed by Professor Barton Miller and a few students from his Advanced Operating Systems Class in 1989.