Fuzzing for Software Security Testing and Quality Assurance (Hardcover)

"Fuzzing for Software Security Testing and Quality Assurance" gives software developers a powerful new tool to build secure, high-quality software, and takes a weapon from the malicious hackers' arsenal. This practical resource helps developers think like a software cracker, so they can find and patch flaws in software before harmful viruses, worms, and Trojans can use these vulnerabilities to rampage systems. Traditional software programmers and testers learn how to make fuzzing a standard practice that integrates seamlessly with all development activities. The book progresses through each phase of software development and points out where testing and auditing can tighten security. It surveys all popular commercial fuzzing tools and explains how to select the right one for a software development project. The book also covers those cases where commercial tools fall short and developers need to build their own custom fuzzing tools.

「軟體安全測試與品質保證的模糊測試」為軟體開發人員提供了一個強大的新工具，用於建立安全且高品質的軟體，同時也剝奪了惡意駭客的武器。這本實用資源幫助開發人員以軟體破解者的思維方式思考，以便在有害病毒、蠕蟲和特洛伊木馬利用這些漏洞侵害系統之前，找到並修補軟體中的缺陷。傳統的軟體程式設計師和測試人員學習如何將模糊測試作為一種標準實踐，無縫地與所有開發活動整合。本書逐步介紹軟體開發的每個階段，並指出測試和審計可以加強安全性的地方。它概述了所有流行的商業模糊測試工具，並解釋如何選擇適合軟體開發項目的工具。本書還涵蓋了商業工具無法滿足需求的情況，開發人員需要建立自己的自定義模糊測試工具的情況。