1 |
Veracode, "State of Software Security Report", 2011.
|
2 |
SANS, "CWE/SANS TOP 25 Most Dangerous Software Errors", http://www.sans.org/top25-software-errors, 2011.
|
3 |
CVE List, "http://cve.mitre.org/cve".
|
4 |
OSVDB, "http://www.osvdb.org".
|
5 |
Exploit DB, "http://www.exploit-db.com".
|
6 |
CWE List, "http://cwe.mitre.org/data/index.html".
|
7 |
Metasploit, "www.metasploit.com".
|
8 |
M. Sutton, A. Greene and P. Amini, "Fuzzing Brute Force Vulnerability Discovery", Addison-Wesley, 2008.
|
9 |
B. Edgar, "Taint Analysis", Hackers to Hackers Conference, 2009.
|
10 |
IDA Pro, http://www.hexblog.com.
|
11 |
Corelan, "In Memory Fuzzing", http://www.corelan.be/index.php/2010/10/20/in-memory-fuzzing, 2010.
|
12 |
Colleen Lewis, Barret Rhoden, Cynthia Sturton, "Using Structured Random Data to Precisely Fuzz Media", http://www.eecs.berkeley.edu/-csturton/classes/cs261/fuzz_media_players.pdf, 2007.
|
13 |
Yong Su Park et al., Window Multimedia Vulnerabilities Analysis Study, KISA, 2009.
|
14 |
Seong Oun Hwang, Finding Vulnerabilities in Binary Codes Using Tainting/Fuzzing Analysis, 6th International conference on Convergence and Hybrid Information Technology (ICHIT), CCIS, vol. 310, 2012.
|