Concepedia

Web Application Fuzzing

Web Application Fuzzing is a dynamic software testing technique that systematically generates and submits malformed, unexpected, or semi-random input data to a web application’s interfaces to uncover security vulnerabilities by observing anomalous behaviors such as crashes, error messages, or potential exploit conditions, thereby distinguishing it from passive or static analysis methods in the domain of web penetration testing.

35

Publications

971

Citations

119

Authors

49

Institutions

Publications per year

2017–2026

23

Parents

Publications

35

Enemy of the state: a state-aware black-box web vulnerability scanner

Adam Doupé, Ludovico Cavedon, Christopher Kruegel et al. · 2012 · 115 citations

, , +17

Automated conformance testing for JavaScript engines via deep compiler fuzzing

Guixin Ye, Zhanyong Tang, Shin Hwei Tan et al. · 2021 · 76 citations · Full text

, , +17

XSS Vulnerability Detection Using Model Inference Assisted Evolutionary Fuzzing

Fabien Duchêne, Roland Groz, Sanjay Rawat et al. · 2012 · 66 citations · Full text

, , +13

Toss a Fault to Your Witcher: Applying Grey-box Coverage-Guided Mutational Fuzzing to Detect SQL and Command Injection Vulnerabilities

Erik Trickel, Fabio Pagani, Chang Zhu et al. · 2023 · 48 citations

, , +17

JIT-Picking

Lukas Bernhard, Tobias Scharnowski, Moritz Schloegel et al. · Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security · 2022 · 46 citations · Full text

, , +17

1–5 of 35

Authors

119

  1. MZ
    Man Zhang

    Høyskolen Kristiania, Norway

    3 publications · 73 citations

    3

    h-index

  2. AA
    Andrea Arcuri

    Simula Research Laboratory, Norway

    3 publications · 73 citations

    3

    h-index

  3. ZH
    Zac Hatfield-Dodds

    Australian National University, Australia

    2 publications · 55 citations

    2

    h-index

  4. GV
    Giovanni Vigna

    University of California, Santa Barbara, United States

    2 publications · 163 citations

    2

    h-index

  5. CK
    Christopher Kruegel

    University of California, Santa Barbara, United States

    2 publications · 163 citations

    2

    h-index

1–5 of 119

Institutions

49

  1. University of California, Santa Barbara

    Santa Barbara, United States

    2 h-index

    8 publications

    652 citations

  2. Høyskolen Kristiania

    Oslo, Norway

    2 h-index

    8 publications

    196 citations

  3. Australian National University

    Canberra, Australia

    2 h-index

    2 publications

    55 citations

  4. Ruhr University Bochum

    Bochum, Germany

    2 h-index

    8 publications

    316 citations

  5. Laboratoire d'Informatique de Grenoble

    Grenoble, France

    2 h-index

    8 publications

    340 citations

  6. Institut polytechnique de Grenoble

    Grenoble, France

    2 h-index

    8 publications

    340 citations

  7. Helmholtz Center for Information Security

    Saarbrücken, Germany

    2 h-index

    5 publications

    178 citations

  8. Université Grenoble Alpes

    Saint-Martin-d'Hères, France

    2 h-index

    8 publications

    340 citations

1–8 of 49

Venues

  1. arXiv (Cornell University)

    Repository · 3 publications · 87 citations

    3

    h-index

  2. Network Security

    1 publications · 12 citations

    1

    h-index

  3. Zenodo (CERN European Organization for Nuclear Research)

    Repository · 1 publications · 40 citations

    1

    h-index

  4. ACM Transactions on Software Engineering and Methodology

    TOSEM · 1 publications · 41 citations

    1

    h-index

  5. Journal of Intelligent Information Systems

    1 publications · 14 citations

    1

    h-index

1–5