模糊测试技术研究
摘要
With the improving of the people attention to software security problem, vulnerability detecting technology gradually become the focus of the research content now. But the traditional vulnerability discovery technology costs long time and need large manpower, and what is more important is that the traditional discovery technology cannot detect the loopholes in the software comprehensively, so a simple and efficient mining technology, namely fuzzing, gradually attract the researchers attention. This article first introduces the development course of fuzzing and related theory knowledge, and then compares the traditional vulnerability mining technology with fuzzing, which can shows that the fuzzing have the incomparable advantages which traditional hole digging method does not have, and studies the fuzzing in all fields of application, as well as the advantages and disadvantages of the fuzzers, at last enumerates the fuzzings limitations of testing technology, and expounds the fuzzings development direction in the future.