AVCDL fuzz testing overview

This training covers an overview of Fuzz Testing. AVCDL repo: https://github.com/AVCDL/AVCDL training material source: https://github.com/AVCDL/AVCDL/tree/main/training/fuzz%20testing%20-%20overview/ References: AVCDL primary document Fuzz Testing Report (AVCDL secondary document) Secure Settings Document (AVCDL secondary document) Attack Surface Analysis Report (AVCDL secondary document) Threat Prioritization Process (AVCDL secondary document) Report Generation (AVCDL elaboration document) Static Analysis Results Interchange Format (SARIF) Version 2.1.0 https://docs.oasis-open.org/sarif/sarif/v2.1.0/os/sarif-v2.1.0-os.pdf Common Weakness Enumeration (CWE) https://cwe.mitre.org/ Fuzzing https://en.wikipedia.org/wiki/Fuzzing Unit testing https://en.wikipedia.org/wiki/Unit_testing Roulette ball [Ralf Roletschek] (CC-BY-SA 3.0) https://commons.wikimedia.org/wiki/File:13-02-27-spielbank-wiesbaden-by-RalfR-094.jpg Setup at the start of a chess game [Bubba73] (CC-BY-SA 3.0) https://commons.wikimedia.org/wiki/File:13-02-27-spielbank-wiesbaden-by-RalfR-094.jpg Chapters: 00:00 Title 00:09 Training Path 00:36 Introduction 01:59 Approach 02:13 Cybersecurity Approach 03:07 Workflow 03:17 Process Workflow 03:37 Activities 03:43 Identify Functions 05:28 Secure Settings 05:41 Create Test 06:46 Perform Testing 08:15 Triage 09:16 Fuzz Testing Report 10:31 Recap 10:39 Summary 10:57 Further Reading 11:11 AVCDL on GitHub 11:32 AVCDL on YouTube 11:48 Next Steps 12:02 References