SoftSec Fuzz

Help enterprises find zero-day vulnerabilities one step ahead of attackers todeliver safer and more stable products in a more compliant manner.

Product Introduction

 

SoftSec Fuzz, is a powerful automatic fuzz testing tool. The tool uses black-box testing technology to greatly improve the usability so that customers can quickly implement testing without  the source code. The tool uses generation-based fuzzer, which can help customers explore potential unknown security vulnerabilities and find quality problems such as software defects efficiently and accurately. In this way, the reliability, stability and security of your software, equipment or systems can be improved significantly. The tool supports a variety of protocol test modules, which can meet your diverse dynamic security test requirements in one stop.

Advantages

 

 

Highly Automated

 

•  Generate cases automatively  
•  Run tests automatively
•  Export results automatively  
•  Generate reports automatively

 

 

Rich Protocols Supported

 

• Automobile bus protocol
• Network protocol of each layer
• File layout

 

 

Powerful Engine

 

• Rich built-in distortion library      
• Rich built-in message sequence
• Rich dynamic rule base
• Protocol message interaction based on state

 

 

 

Application Scenarios

 

 

Development

 

Through introducing fuzz testing technology into CI/CD and other links, potential vulnerabilities and defects can be found in time during the development process, which is convenient for development engineers to repair as soon as possible and improves the reliability and stability of software products.

 

 

 

Security

 

The introduction of fuzz testing technology in security testing can help find potential unknown vulnerabilities before the release of software products as well as problems that are difficult to detect by means of manpower and static analysis, thus improving the security of software products.

 

 

Inspection and Acceptance

 

Vehicle OEM, intelligent manufacturing and other manufacturers are often unable to access the source code of the purchased parts for confidentiality and other reasons. Under this background, FUZZ testing products can help manufacturers verify the reliability and safety of parts effectively before they are integrated into the final products.

 

 

Independant Institutions

 

When conducting research and testing services, testing institutions, universities, third-party laboratories and other institutions can use this testing tool to conduct in-depth vulnerability mining to find software defects and unknown vulnerabilities, and thus improve the overall security of the industry.