Menu
Is there a flexible framework for fuzzy testing in Java?
The Wikipedia article on Fuzz testing defines fuzz testing as follows:
Fuzz testing or fuzzing is a software testing technique, often automated or semi-automated, that involves providing invalid, unexpected, or random data to the inputs of a computer program. The program is then monitored for exceptions such as crashes, or failing built-in code assertions or for finding potential memory leaks. Fuzzing is commonly used to test for security problems in software or computer systems.
I know there is such a framework for Erlang. Any hints are welcome.
861
Fuzzing (also called fuzz testing) is a type of black box testing that enters random, malformed data as inputs into software programs to determine if they will crash.
LibFuzzer is linked with the library under test, and feeds fuzzed inputs to the library via a specific fuzzing entrypoint (aka “target function”); the fuzzer then tracks which areas of the code are reached, and generates mutations on the corpus of input data in order to maximize the code coverage.
Fuzz testing or fuzzing is an automated software testing method that injects invalid, malformed, or unexpected inputs into a system to reveal software defects and vulnerabilities. A fuzzing tool injects these inputs into the system and then monitors for exceptions such as crashes or information leakage.
A fuzz target consists of two files: a build file and the fuzz target source code. Create your files in a location next to the library you are fuzzing. Give the fuzzer a name that describes what the fuzzer does. // Use the data to call the library you are fuzzing.
You may want to look into JQF:
https://github.com/rohanpadhye/jqf
180
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
