Universal ASN.1 BER Fuzzer Test Suite Data Sheet
Test Suite:
Universal ASN.1 BER Fuzzer Test Suite
Direction:
File

Universal ASN.1 BER Fuzzer can be used to test the robustness, security and reliability of virtually any software that reads or parses ASN.1 files. It discovers faults in target software by feeding it with invalid, incorrect and malformed data and data structures. Universal ASN.1 BER Fuzzer does not require any specific ASN.1 schemas. Test cases are automatically generated from user provided sample files. The Sample file is loaded into a generic ASN.1 model, and that result is used to generate test cases. The Universal ASN.1 Ber Fuzzer can deliver the generated test cases to the target software via files, pipes, TCP (client/server), HTTP or HTTPS. Additional fine-tuning is available for each delivery mechanism. The health of the target software can be monitored with built-in mechanisms or with an extensible instrumentation framework.

Used specifications

Specification
Title
Notes
ITU-T X.690
Information technology – ASN.1 encoding rules: Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER)
Test tool general features
  • Fully automated black-box negative testing
  • Ready-made test cases
  • Written in Java(tm)
  • GUI command line remote interface modes
  • Instrumentation (health-check) capability
  • Support and maintenance
  • Comprehensive user documentation
  • Results reporting and analysis