SYSTEM AND METHOD FOR FUZZING NETWORK APPLICATION PROGRAM

摘要

The present invention provides a system and method for fuzzing a network application program which allows to use a captured packet when performing a fuzzing process with respect to a network application program such that a protocol analyzing process is not necessary, and manufacturing a fuzzer program is also not necessary. The system according to the present invention comprises: a fuzzing performing client program unit for generating a packet to be transmitted from a captured packet and applying a fuzzing rule to the packet to be transmitted so as to output the same; and a fuzzing observer program unit for observing an event of a program to be fuzzed and an abnormal termination while giving and taking a packet from the fuzzing performing client program unit with the program to be fuzzed so as to analyze a termination situation in order to verify security problems when the abnormal termination is occurred.