05 — Glossary · Application & Data
Fuzz Testing
GL-920 · also Fuzzing
Automated testing that feeds a program large volumes of generated, malformed or unexpected input and watches for crashes, hangs, leaks or broken invariants, to find defects and security flaws that hand-written cases miss.
Coverage-guided fuzzers keep the inputs that reach new code paths and often run continuously. Related to property-based testing, which generates inputs to check stated properties rather than to break the program.
See also
In the catalog
Read next
Fuzzing (OWASP Web Security Testing Guide) ↗
The definition above is written in our own words; the source is linked, not copied.