{"id":177,"date":"2006-10-23T10:14:42","date_gmt":"2006-10-23T15:14:42","guid":{"rendered":"http:\/\/www.juixe.com\/techknow\/index.php\/2006\/10\/23\/rubyconf-iron-mongrel-fuzzing\/"},"modified":"2006-10-23T10:14:42","modified_gmt":"2006-10-23T15:14:42","slug":"rubyconf-iron-mongrel-fuzzing","status":"publish","type":"post","link":"http:\/\/juixe.com\/techknow\/index.php\/2006\/10\/23\/rubyconf-iron-mongrel-fuzzing\/","title":{"rendered":"RubyConf: Iron Mongrel &#8211; Fuzzing"},"content":{"rendered":"<p><a href=\"http:\/\/www.zedshaw.com\/\">Zed Shaw<\/a>, author of <a href=\"http:\/\/mongrel.rubyforge.org\/\">Mongrel<\/a>, got an applause when introduced for this talk at <b>RubyConf 2006<\/b>.  During this presentation, Zed talked about <a href=\"http:\/\/en.wikipedia.org\/wiki\/Fuzzing\">fuzzing<\/a>.  I am new to the ideas of fuzzing and I found this talk extremely interesting.  One quick definition of fuzzing is to break a software system by handing it nasty maliciously crafted random input and events.  One simple way of fuzzing is to always enter &#8216;yes&#8217; on a console application and watch out for errors and exceptions.  The basic theory behind fuzzing is that programmers will test using what they thing are valid inputs, but the programmer can&#8217;t predict user input out in the world.  Unit tests are predicatable since a developer wrote the system, knows what to expect, and wrote test based on that.  A fuzz test has no idea of your system.  According to Zed, fuzzing is a great way to finalized vendor selection of two closed source third party software packages.<\/p>\n<p>Zed has made available a Ruby fuzz gem known as <a href=\"http:\/\/rfuzz.rubyforge.org\/\">RFuzz<\/a>.  RFuzz is made up of a randomness engine, data collection, and statistical analysis.  When fuzzing a software system, you will usually need to do some analysis of the results to verify if a fix actually worked.  After this talk I felt that maybe I should try to use RFuzz in <b>JRuby<\/b> to try to blow up our Java application.<\/p>\n<p>Technorati Tags: <a href=\"http:\/\/technorati.com\/tag\/ruby\" rel=\"tag\">ruby<\/a>, <a href=\"http:\/\/technorati.com\/tag\/rubyconf\" rel=\"tag\"> rubyconf<\/a>, <a href=\"http:\/\/technorati.com\/tag\/rubyconf2006\" rel=\"tag\"> rubyconf2006<\/a>, <a href=\"http:\/\/technorati.com\/tag\/rfuzz\" rel=\"tag\"> rfuzz<\/a>, <a href=\"http:\/\/technorati.com\/tag\/fuzzing\" rel=\"tag\"> fuzzing<\/a>, <a href=\"http:\/\/technorati.com\/tag\/testing\" rel=\"tag\"> testing<\/a>, <a href=\"http:\/\/technorati.com\/tag\/software+analysis\" rel=\"tag\"> software analysis<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Zed Shaw, author of Mongrel, got an applause when introduced for this talk at RubyConf 2006. During this presentation, Zed talked about fuzzing. I am new to the ideas of fuzzing and I found this talk extremely interesting. One quick definition of fuzzing is to break a software system by handing it nasty maliciously crafted [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","footnotes":""},"categories":[22,3],"tags":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p902K-2R","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"http:\/\/juixe.com\/techknow\/index.php\/wp-json\/wp\/v2\/posts\/177"}],"collection":[{"href":"http:\/\/juixe.com\/techknow\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/juixe.com\/techknow\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/juixe.com\/techknow\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/juixe.com\/techknow\/index.php\/wp-json\/wp\/v2\/comments?post=177"}],"version-history":[{"count":0,"href":"http:\/\/juixe.com\/techknow\/index.php\/wp-json\/wp\/v2\/posts\/177\/revisions"}],"wp:attachment":[{"href":"http:\/\/juixe.com\/techknow\/index.php\/wp-json\/wp\/v2\/media?parent=177"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/juixe.com\/techknow\/index.php\/wp-json\/wp\/v2\/categories?post=177"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/juixe.com\/techknow\/index.php\/wp-json\/wp\/v2\/tags?post=177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}