Channels ▼
RSS

Testing

New Buzz For Fuzz-o-Matic TaaS


Scandinavian software testing company Codenomicon has this month released its Fuzz-o-Matic cloud-based Testing-as-a-Service (TaaS) platform for applications running on Windows, Linux, Mac, and mobile operating systems. As a company that sells itself on a tagline of zero-day vulnerability discovery for software teams with limited budget for security auditing, Codenomicon's offering presents users with actual, repeatable test cases for software bugs that cause product crashes and security breaches.

Despite being somewhat scant on details of exactly how regularly updated or dynamic its test cases are, the company claims to provide software application developers with a means of uncovering previously-unknown vulnerabilities before hackers do, without false positives or false alarms.

For programmers who have already tested software with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), vulnerability scanning, or hybrid analysis, Fuzz-o-Matic is lauded (by its makers) as the "next progression" in testing to find the bugs that other testing solutions have missed. For freshly baked code that has not been tested, but is at an executable stage, the TaaS platform claims to be able to provide users with longer lead-times to remedy bugs before software release.

In what is arguably a somewhat partisan comment, Frost & Sullivan's test and measurement practice spokesperson Olga Yashkova said that, "With Fuzz-o-Matic, Codenomicon is making available advanced methods of software security testing to a wide range of users who never before had access. Based on experience in identifying software security risk and Fuzz-o-Matic's user-friendly interface, Codenomicon is first-to-market in a new area with broad implications for third-party testing, security testing, staff augmentation, and serving organizations with limited software testing budgets."

Codenomicon's chief security strategist Ira Winkler says that while developers often think of software fuzzing as a security measure, fuzzing is really testing for all types of software bugs, of which security vulnerabilities are just one type of bug: "Fuzzing is perhaps the most effective measure of identifying any software reliability issues."

NOTE: Application "fuzzing" uses unexpected inputs to stress-test software far beyond normal operating conditions. Most software testing simulates normal operating conditions to determine if software does what it is designed to do. Black-hat hackers use application fuzzing to find exploitable security bugs in unused or rarely-used software functionality.


Related Reading


More Insights






Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dr. Dobb's encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dr. Dobb's moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing or spam. Dr. Dobb's further reserves the right to disable the profile of any commenter participating in said activities.

 
Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
 

Video