Fuzz testing, or fuzzing, is a way of analysing a program to find inputs likely to result in exploitable errors. These typically cause some kind of vulnerability that a malicious attacker could ...

If you have read my blog here before, you might know me from the PROTOS project, and maybe as an author on VoIP security. PROTOS was fun, but it is really far away from real fuzzing. VoIP was ...

As part of VoIP threats series, I’d like to introduce Malformed Messages (or Protocol Fuzzing). An attacker may create and send malformed messages to the target server or client for the purpose of ...

When you're in the kitchen and throw pasta against the wall, it might stick so that you can tell whether it's cooked. When you're in computer security and you throw things against a target's "wall," ...

Microsoft uncovered more than 1,800 bugs in Office 2010 by tapping into the unused computing horsepower of idling PCs, a company security engineer said today. Office developers found the bugs by ...