Fuzzing

  1. Crash Triage and Analysis
    1. Crash Uniqueness
      1. Hashing Call Stacks
        1. Stack Trace Analysis
          1. Uniqueness Metrics
          2. Grouping by Crash Location
            1. Source Code Mapping
              1. Aggregating Similar Crashes
              2. Crash Bucketing
                1. Automated Classification
                  1. Priority Assignment
                2. Minimizing a Crashing Test Case
                  1. Automated Test Case Reduction
                    1. Delta Debugging
                      1. Minimization Tools
                      2. Manual Reduction Techniques
                        1. Binary Search Approach
                          1. Structural Minimization
                        2. Root Cause Analysis
                          1. Debugging with GDB
                            1. Setting Breakpoints
                              1. Analyzing Memory State
                              2. Debugging with WinDbg
                                1. Windows-Specific Analysis
                                  1. Crash Dump Analysis
                                  2. Debugging with LLDB
                                    1. LLVM Debugger Features
                                      1. Cross-Platform Debugging
                                      2. Analyzing Core Dumps
                                        1. Post-Mortem Analysis
                                          1. Extracting Crash Information
                                        2. Determining Security Impact
                                          1. Exploitability Scoring
                                            1. Assessing Attack Potential
                                              1. Scoring Systems
                                              2. Differentiating Bugs from Vulnerabilities
                                                1. Security vs. Stability Issues
                                                  1. Prioritization
                                                  2. Impact Assessment
                                                    1. Confidentiality Impact
                                                      1. Integrity Impact
                                                        1. Availability Impact

                                                    Previous

                                                    6. The Fuzzing Process

                                                    Go to top

                                                    Next

                                                    8. Advanced Fuzzing Techniques