443 search results - page 4 / 89 » Testing for Software Vulnerability Using Environment Perturb... |
SP
2010
IEEE
13 years 11 months ago
2010
IEEE
—Fuzz testing has proven successful in finding security vulnerabilities in large programs. However, traditional fuzz testing tools have a well-known common drawback: they are in...
CAV
2011
Springer
12 years 11 months ago
2011
Springer
Abstract. Many automatic testing, analysis, and verification techniques for programs can effectively be reduced to a constraint-generation phase followed by a constraint-solving ...
WETICE
2000
IEEE
14 years 11 hour ago
2000
IEEE
This paper presents joint work by the California Institute of Technology’s Jet Propulsion Laboratory and the University of California at Davis (UC Davis) sponsored by the Nation...
ESSOS
2010
Springer
2010
Springer
Idea: Using System Level Testing for Revealing SQL Injection-Related Error Message Information Leaks
14 years 2 months ago
Completely handling SQL injection consists of two activities: properly protecting the system from malicious input, and preventing any resultant error messages caused by SQL injecti...
ACSAC
2007
IEEE
14 years 2 months ago
2007
IEEE
We present an extension of traditional "black box" fuzz testing using a genetic algorithm based upon a Dynamic Markov Model fitness heuristic. This heuristic allows us t...