2 citations · 3 across the 5 of their papers we have counts for
5 papers
WuppieFuzz: Coverage-Guided, Stateful REST API Fuzzing
Thomas Rooijakkers, Anne Nijsten, Cristian Daniele +3
Many business processes currently depend on web services, often using REST APIs for communication. REST APIs expose web service functionality through endpoints, allowing easy clien…
Uses of Active and Passive Learning in Stateful Fuzzing
Cristian Daniele, Seyed Behnam Andarzian, Erik Poll
This paper explores the use of active and passive learning, i.e.\ active and passive techniques to infer state machine models of systems, for fuzzing. Fuzzing has become a very pop…
Is Stateful Fuzzing Really Challenging?
Cristian Daniele
Fuzzing has been proven extremely effective in finding vulnerabilities in software. When it comes to fuzz stateless systems, analysts have no doubts about the choice to make. In fa…
Evaluating the Fork-Awareness of Coverage-Guided Fuzzers
Marcello Maugeri, Cristian Daniele, Giampaolo Bella +1
Fuzz testing (or fuzzing) is an effective technique used to find security vulnerabilities. It consists of feeding a software under test with malformed inputs, waiting for a weird s…
Fuzzers for stateful systems: Survey and Research Directions
Cristian Daniele, Seyed Behnam Andarzian, Erik Poll
Fuzzing is a security testing methodology effective in finding bugs. In a nutshell, a fuzzer sends multiple slightly malformed messages to the software under test, hoping for crash…