Chapter 8 - Fuzzing

Abstract

This chapter covers how virtualized environments can significantly increase the efficiency of fuzzing. Using scripted snapshots, the reset of an environment can be done in a matter of seconds instead of minutes. Using the debugging features of a virtualized environment to monitor the application can provide an ideal environment for the hard-to-monitor applications. In addition, it is possible to run multiple instances of the same application in parallel using multiple hardware platforms to increase the speed with which an application can be tested in an automated fashion. Virtualization has proven ideal for resetting the environment to an initial state before any malformed data had been sent. Without using virtualization this can involve restarting the application, or even worse, initiating a reboot just to get to a state where the next test can be performed. In addition, monitoring the application without interfering with the application itself can be a challenge. Some applications attempt to prevent debuggers from observing their behavior. While these attempts can be overcome (defeated, bypassed), it can be an involved process of application modification and research.