Fuzzing: Brute Force Vulnerability Discovery

Valutazione media 3,83
( su 42 valutazioni fornite da GoodReads )
 
9780321446114: Fuzzing: Brute Force Vulnerability Discovery

FUZZING Master One of Today's Most Powerful Techniques for Revealing Security Flaws! Fuzzing has evolved into one of today's most effective approaches to test software security. To "fuzz," you attach a program's inputs to a source of random data, and then systematically identify the failures that arise. Hackers have relied on fuzzing for years: Now, it's your turn. In this book, renowned fuzzing experts show you how to use fuzzing to reveal weaknesses in your software before someone else does. Fuzzing is the first and only book to cover fuzzing from start to finish, bringing disciplined best practices to a technique that has traditionally been implemented informally. The authors begin by reviewing how fuzzing works and outlining its crucial advantages over other security testing methods. Next, they introduce state-of-the-art fuzzing techniques for finding vulnerabilities in network protocols, file formats, and web applications; demonstrate the use of automated fuzzing tools; and present several insightful case histories showing fuzzing at work. Coverage includes: * Why fuzzing simplifies test design and catches flaws other methods miss * The fuzzing process: from identifying inputs to assessing "exploitability" * Understanding the requirements for effective fuzzing * Comparing mutation-based and generation-based fuzzers * Using and automating environment variable and argument fuzzing * Mastering in-memory fuzzing techniques * Constructing custom fuzzing frameworks and tools * Implementing intelligent fault detection Attackers are already using fuzzing. You should, too. Whether you're a developer, security engineer, tester, or QA specialist, this book teaches you how to build secure software. Foreword xix Preface xxi Acknowledgments xxv About the Author xxvii PARTI BACKGROUND 1 Chapter 1 Vulnerability Discovery Methodologies 3 Chapter 2 What Is Fuzzing? 21 Chapter 3 Fuzzing Methods and Fuzzer Types 33 Chapter 4 Data Representation and Analysis 45 Chapter 5 Requirements for Effective Fuzzing 61 PART II TARGETS AND AUTOMATION 71 Chapter 6 Automation and Data Generation 73 Chapter 7 Environment Variable and Argument Fuzzing 89 Chapter 8 Environment Variable and Argument Fuzzing: Automation 103 Chapter 9 Web Application and Server Fuzzing 113 Chapter 10 Web Application and Server Fuzzing: Automation 137 Chapter 11 File Format Fuzzing 169 Chapter 12 File Format Fuzzing: Automation on UNIX 181 Chapter 13 File Format Fuzzing: Automation on Windows 197 Chapter 14 Network Protocol Fuzzing 223 Chapter 15 Network Protocol Fuzzing: Automation on UNIX 235 Chapter 16 Network Protocol Fuzzing: Automation on Windows 249 Chapter 17 Web Browser Fuzzing 267 Chapter 18 Web Browser Fuzzing: Automation 283 Chapter 19 In-Memory Fuzzing 301 Chapter 20 In-Memory Fuzzing: Automation 315 PART III ADVANCED FUZZING TECHNOLOGIES 349 Chapter 21 Fuzzing Frameworks 351 Chapter 22 Automated Protocol Dissection 419 Chapter 23 Fuzzer Tracking 437 Chapter 24 Intelligent Fault Detection 471 PART IV LOOKING FORWARD 495 Chapter 25 Lessons Learned 497 Chapter 26 Looking Forward 507 Index 519

Le informazioni nella sezione "Riassunto" possono far riferimento a edizioni diverse di questo titolo.

I migliori risultati di ricerca su AbeBooks

1.

Sutton, Michael
ISBN 10: 0321446119 ISBN 13: 9780321446114
Nuovi Paperback Quantità: 2
Da
BargainBookStores
(Grand Rapids, MI, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Paperback. Condizione libro: New. Codice libro della libreria 1487313

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 33,87
Convertire valuta

Aggiungere al carrello

Spese di spedizione: EUR 3,67
In U.S.A.
Destinazione, tempi e costi

2.

Michael SuttonAdam GreenePedram Amini
Editore: Prentice Hall
ISBN 10: 0321446119 ISBN 13: 9780321446114
Nuovi Quantità: > 20
Da
INDOO
(Avenel, NJ, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Prentice Hall. Condizione libro: New. Brand New. Codice libro della libreria 0321446119

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 35,47
Convertire valuta

Aggiungere al carrello

Spese di spedizione: EUR 3,22
In U.S.A.
Destinazione, tempi e costi

3.

Michael Sutton
Editore: Pearson Education (2007)
ISBN 10: 0321446119 ISBN 13: 9780321446114
Nuovi Quantità: 6
Da
PBShop
(Wood Dale, IL, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Pearson Education, 2007. PAP. Condizione libro: New. New Book.Shipped from US within 10 to 14 business days. Established seller since 2000. Codice libro della libreria IB-9780321446114

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 35,50
Convertire valuta

Aggiungere al carrello

Spese di spedizione: EUR 3,67
In U.S.A.
Destinazione, tempi e costi

4.

Michael Sutton, Adam Greene, Pedram Amini
Editore: Pearson Education (US), United States (2007)
ISBN 10: 0321446119 ISBN 13: 9780321446114
Nuovi Quantità: 1
Da
The Book Depository US
(London, Regno Unito)
Valutazione libreria
[?]

Descrizione libro Pearson Education (US), United States, 2007. Mixed media product. Condizione libro: New. 246 x 178 mm. Language: English . Brand New Book. FUZZING Master One of Today s Most Powerful Techniques for Revealing Security Flaws! Fuzzing has evolved into one of today s most effective approaches to test software security. To fuzz, you attach a program s inputs to a source of random data, and then systematically identify the failures that arise. Hackers have relied on fuzzing for years: Now, it s your turn. In this book, renowned fuzzing experts show you how to use fuzzing to reveal weaknesses in your software before someone else does. Fuzzing is the first and only book to cover fuzzing from start to finish, bringing disciplined best practices to a technique that has traditionally been implemented informally. The authors begin by reviewing how fuzzing works and outlining its crucial advantages over other security testing methods. Next, they introduce state-of-the-art fuzzing techniques for finding vulnerabilities in network protocols, file formats, and web applications; demonstrate the use of automated fuzzing tools; and present several insightful case histories showing fuzzing at work. Coverage includes: * Why fuzzing simplifies test design and catches flaws other methods miss * The fuzzing process: from identifying inputs to assessing exploitability * Understanding the requirements for effective fuzzing * Comparing mutation-based and generation-based fuzzers * Using and automating environment variable and argument fuzzing * Mastering in-memory fuzzing techniques * Constructing custom fuzzing frameworks and tools * Implementing intelligent fault detection Attackers are already using fuzzing. You should, too. Whether you re a developer, security engineer, tester, or QA specialist, this book teaches you how to build secure software. Foreword xix Preface xxi Acknowledgments xxv About the Author xxvii PARTI BACKGROUND 1 Chapter 1 Vulnerability Discovery Methodologies 3 Chapter 2 What Is Fuzzing? 21 Chapter 3 Fuzzing Methods and Fuzzer Types 33 Chapter 4 Data Representation and Analysis 45 Chapter 5 Requirements for Effective Fuzzing 61 PART II TARGETS AND AUTOMATION 71 Chapter 6 Automation and Data Generation 73 Chapter 7 Environment Variable and Argument Fuzzing 89 Chapter 8 Environment Variable and Argument Fuzzing: Automation 103 Chapter 9 Web Application and Server Fuzzing 113 Chapter 10 Web Application and Server Fuzzing: Automation 137 Chapter 11 File Format Fuzzing 169 Chapter 12 File Format Fuzzing: Automation on UNIX 181 Chapter 13 File Format Fuzzing: Automation on Windows 197 Chapter 14 Network Protocol Fuzzing 223 Chapter 15 Network Protocol Fuzzing: Automation on UNIX 235 Chapter 16 Network Protocol Fuzzing: Automation on Windows 249 Chapter 17 Web Browser Fuzzing 267 Chapter 18 Web Browser Fuzzing: Automation 283 Chapter 19 In-Memory Fuzzing 301 Chapter 20 In-Memory Fuzzing: Automation 315 PART III ADVANCED FUZZING TECHNOLOGIES 349 Chapter 21 Fuzzing Frameworks 351 Chapter 22 Automated Protocol Dissection 419 Chapter 23 Fuzzer Tracking 437 Chapter 24 Intelligent Fault Detection 471 PART IV LOOKING FORWARD 495 Chapter 25 Lessons Learned 497 Chapter 26 Looking Forward 507 Index 519. Codice libro della libreria AAC9780321446114

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 39,56
Convertire valuta

Aggiungere al carrello

Spese di spedizione: GRATIS
Da: Regno Unito a: U.S.A.
Destinazione, tempi e costi

5.

Michael Sutton, Adam Greene, Pedram Amini
Editore: Pearson Education (US), United States (2007)
ISBN 10: 0321446119 ISBN 13: 9780321446114
Nuovi Quantità: 1
Da
The Book Depository
(London, Regno Unito)
Valutazione libreria
[?]

Descrizione libro Pearson Education (US), United States, 2007. Mixed media product. Condizione libro: New. 246 x 178 mm. Language: English . Brand New Book. FUZZING Master One of Today s Most Powerful Techniques for Revealing Security Flaws! Fuzzing has evolved into one of today s most effective approaches to test software security. To fuzz, you attach a program s inputs to a source of random data, and then systematically identify the failures that arise. Hackers have relied on fuzzing for years: Now, it s your turn. In this book, renowned fuzzing experts show you how to use fuzzing to reveal weaknesses in your software before someone else does. Fuzzing is the first and only book to cover fuzzing from start to finish, bringing disciplined best practices to a technique that has traditionally been implemented informally. The authors begin by reviewing how fuzzing works and outlining its crucial advantages over other security testing methods. Next, they introduce state-of-the-art fuzzing techniques for finding vulnerabilities in network protocols, file formats, and web applications; demonstrate the use of automated fuzzing tools; and present several insightful case histories showing fuzzing at work. Coverage includes: * Why fuzzing simplifies test design and catches flaws other methods miss * The fuzzing process: from identifying inputs to assessing exploitability * Understanding the requirements for effective fuzzing * Comparing mutation-based and generation-based fuzzers * Using and automating environment variable and argument fuzzing * Mastering in-memory fuzzing techniques * Constructing custom fuzzing frameworks and tools * Implementing intelligent fault detection Attackers are already using fuzzing. You should, too. Whether you re a developer, security engineer, tester, or QA specialist, this book teaches you how to build secure software. Foreword xix Preface xxi Acknowledgments xxv About the Author xxvii PARTI BACKGROUND 1 Chapter 1 Vulnerability Discovery Methodologies 3 Chapter 2 What Is Fuzzing? 21 Chapter 3 Fuzzing Methods and Fuzzer Types 33 Chapter 4 Data Representation and Analysis 45 Chapter 5 Requirements for Effective Fuzzing 61 PART II TARGETS AND AUTOMATION 71 Chapter 6 Automation and Data Generation 73 Chapter 7 Environment Variable and Argument Fuzzing 89 Chapter 8 Environment Variable and Argument Fuzzing: Automation 103 Chapter 9 Web Application and Server Fuzzing 113 Chapter 10 Web Application and Server Fuzzing: Automation 137 Chapter 11 File Format Fuzzing 169 Chapter 12 File Format Fuzzing: Automation on UNIX 181 Chapter 13 File Format Fuzzing: Automation on Windows 197 Chapter 14 Network Protocol Fuzzing 223 Chapter 15 Network Protocol Fuzzing: Automation on UNIX 235 Chapter 16 Network Protocol Fuzzing: Automation on Windows 249 Chapter 17 Web Browser Fuzzing 267 Chapter 18 Web Browser Fuzzing: Automation 283 Chapter 19 In-Memory Fuzzing 301 Chapter 20 In-Memory Fuzzing: Automation 315 PART III ADVANCED FUZZING TECHNOLOGIES 349 Chapter 21 Fuzzing Frameworks 351 Chapter 22 Automated Protocol Dissection 419 Chapter 23 Fuzzer Tracking 437 Chapter 24 Intelligent Fault Detection 471 PART IV LOOKING FORWARD 495 Chapter 25 Lessons Learned 497 Chapter 26 Looking Forward 507 Index 519. Codice libro della libreria AAC9780321446114

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 41,13
Convertire valuta

Aggiungere al carrello

Spese di spedizione: GRATIS
Da: Regno Unito a: U.S.A.
Destinazione, tempi e costi

6.

Sutton, Michael; Greene, Adam; Amini, Pedram
Editore: Addison-Wesley Professional
ISBN 10: 0321446119 ISBN 13: 9780321446114
Nuovi PAPERBACK Quantità: 1
Da
Movie Mars
(Indian Trail, NC, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Addison-Wesley Professional. PAPERBACK. Condizione libro: New. 0321446119 Brand New Book. Ships from the United States. 30 Day Satisfaction Guarantee!. Codice libro della libreria 4734437

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 39,52
Convertire valuta

Aggiungere al carrello

Spese di spedizione: EUR 3,67
In U.S.A.
Destinazione, tempi e costi

7.

Sutton, Michael
Editore: Addison-Wesley Professional (2007)
ISBN 10: 0321446119 ISBN 13: 9780321446114
Nuovi Paperback Quantità: 6
Da
Murray Media
(North Miami Beach, FL, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Addison-Wesley Professional, 2007. Paperback. Condizione libro: New. Codice libro della libreria 0321446119

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 40,63
Convertire valuta

Aggiungere al carrello

Spese di spedizione: EUR 2,75
In U.S.A.
Destinazione, tempi e costi

8.

Michael Sutton
Editore: Pearson Education (2007)
ISBN 10: 0321446119 ISBN 13: 9780321446114
Nuovi Quantità: 6
Da
Books2Anywhere
(Fairford, GLOS, Regno Unito)
Valutazione libreria
[?]

Descrizione libro Pearson Education, 2007. PAP. Condizione libro: New. New Book. Shipped from US within 10 to 14 business days. Established seller since 2000. Codice libro della libreria IB-9780321446114

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 35,87
Convertire valuta

Aggiungere al carrello

Spese di spedizione: EUR 10,41
Da: Regno Unito a: U.S.A.
Destinazione, tempi e costi

9.

Sutton, Michael; Greene, Adam; Amini, Pedram
Editore: Addison-Wesley Professional
ISBN 10: 0321446119 ISBN 13: 9780321446114
Nuovi PAPERBACK Quantità: 1
Da
BookShop4U
(PHILADELPHIA, PA, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Addison-Wesley Professional. PAPERBACK. Condizione libro: New. 0321446119. Codice libro della libreria Z0321446119ZN

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 47,40
Convertire valuta

Aggiungere al carrello

Spese di spedizione: GRATIS
In U.S.A.
Destinazione, tempi e costi

10.

Michael Sutton
ISBN 10: 0321446119 ISBN 13: 9780321446114
Nuovi Paperback Prima edizione Quantità: 1
Da
Grand Eagle Retail
(Wilmington, DE, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Paperback. Condizione libro: New. 1st. 178mm x 27mm x 232mm. Paperback. FUZZING Master One of Today's Most Powerful Techniques for Revealing Security Flaws Fuzzing has evolved into one of today's most effective approaches to test software security. .Shipping may be from multiple locations in the US or from the UK, depending on stock availability. 543 pages. 0.798. Codice libro della libreria 9780321446114

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 48,39
Convertire valuta

Aggiungere al carrello

Spese di spedizione: GRATIS
In U.S.A.
Destinazione, tempi e costi

Vedi altre copie di questo libro

Vedi tutti i risultati per questo libro