Forensic Tool Fuzzing

Art der Arbeit:

Studien-/Bachelor-/Diplom-/Masterarbeit

Betreuer:

Janine Schneider

Beschreibung der Arbeit:

Fuzzing is a technique to find bugs and vulnerabilities in software by feeding the software with randomly generated invalid data until an error occurs or the software crashes. The advantage of this method is that it can be used for white-box software as well as grey-box and black-box software. Fuzzing is currently still rarely used in digital forensics. Nevertheless, forensic analysis tools are nothing more than software in which errors and vulnerabilities can creep in. Due to the sensitive purpose of such tools, however, they are subject to increased requirements, which is why the existing tests of such tools should be supplemented by fuzzing. The aim of this paper is to first look at where fuzzing is already used in digital forensics and whether it is possible to find vulnerabilities in known (open-source) tools using this technique.

Bearbeitungszustand:

Die Arbeit ist bereits vergeben.