Building Fast Fuzzers

Understand

Fuzzing is one of the key techniques for evaluating the robustness of programs against attacks.

• Fuzzing has to be effective in producing inputs that cover functionality and find vulnerabilities.
• But it also has to be efficient in producing such inputs quickly.
• Random fuzzers are very efficient, as they can quickly generate random inputs; but they are not very effective, as the large majority of inputs generated is syntactically invalid.