Contact Person
SQC, SQC Team, Martin Schneider
Dipl.-Inform. Martin Schneider
Senior Scientist
Business Unit SQC
Tel.: +49 30 3463-7383

More information

SQC launches Data Fuzzing Library "Fuzzino"

News from May 23, 2013

In a world more connected that ever before security testing has become an essential part of the software development process. Especially fuzzing has proven to be a reliable method for detecting security gaps. In order to avoid costly development of new special fuzzing testing tools researchers at Fraunhofer FOKUS have created the fuzzing libray “Fuzzino”, that provides for testing tools to be made fuzzable.

As of now Fuzzino is available as an open-source solution. A basic Fuzzino solution comes with smart fuzzing heuristics for data fuzzing. Additionally and in coordination with the client Fraunhofer FOKUS is developing custom-made heuristics for established protocols that besides data fuzzing also allow behavioral fuzzing.

Fuzzing has proven very effective in security testing as an important technique for the detection of unknown security gaps (0 day vulnerabilities). Interfaces of the system to be tested are confronted with invalid and unexpected entries in various ways in order to assess their robustness. For further information on fuzzing testing by Fraunhofer FOKUS please visit our project page.

Further information on the website of Fuzzing Testing at Fraunhofer FOKUS.