文档介绍：5/19/08 12:45 PM Page i
Fuzzing for Software
Security Testing and
Quality Assurance
5/19/08 12:45 PM Page ii
For a list of related Artech House titles, please turn to the back of this book.
5/19/08 12:45 PM Page iii
Fuzzing for Software
Security Testing and
Quality Assurance
Ari Takanen
Jared DeMott
Charlie Miller
5/19/08 12:45 PM Page iv
Library of Congress Cataloging-in-Publication Data
A catalog record for this book is available from the . Library of Congress.
British Library Cataloguing in Publication Data
A catalogue record for this book is available from the British Library.
ISBN 13: 978-1-59693-214-2
Cover design by Igor Valdman
© 2008 ARTECH HOUSE, INC.
685 Canton Street
Norwood, MA 02062
All rights reserved. Printed and bound in the United States of America. No part of this
book may be reproduced or utilized in any form or by any means, electronic or
mechanical, including photocopying, recording, or by any information storage and
retrieval system, without permission in writing from the publisher.
All terms mentioned in this book that are known to be trademarks or service marks
have been appropriately capitalized. Artech House cannot attest to the accuracy of this
information. Use of a term in this book should not be regarded as affecting the validity
of any trademark or service mark.
**********
5/19/08 12:45 PM Page v
This book is dedicated to our families and friends . . .
. . . and also to all quality assurance specialists and security experts
who are willing to share their knowledge and expertise
to enable others to learn and improve their skills.
5/19/08 12:45 PM Page vi
5/19/08 12:45 PM Page vii
Contents
Foreword xv
Preface xix
Acknowledgments xxi
CHAPTER 1
Introduction 1
Software Security 2
Security Incident 4
Disclosure Pro