Building a trustworthy distributed fuzzing framework

• المؤلف الرئيسي: Chen, Hongyu
• مؤلفون آخرون: Liu Yang
• التنسيق: Final Year Project
• اللغة: English
• منشور في: Nanyang Technological University 2022
• الموضوعات: Engineering::Electrical and electronic engineering
• الوصول للمادة أونلاين: https://hdl.handle.net/10356/158300

This project a is a full stack web application development project and it contains four main structures, which are frontend development, backend development, database development and distributed system management. This project is carried out by Chen Hongyu personally and under guidance from Mr. Li YueKang from Cyber Security Research Center of Nanyang Technological University. The purpose of this project is building a user-friendly website to provide fuzzing service to users without learning curve. Fuzz testing is a penetration testing technique which is designed to discover coding vulnerabilities and security exploits in programs, operating systems execution files or networks protocols. This technology is heavily used in current world for penetration testing but requires strong penetration testing background. Therefore, we introduce in this project to lower down the entry level of fuzzing for users to do penetration testing over their programs. In this project, the frontend is built by React and Ant Design Pro. React framework is supporting asynchronized UI update which is suitable for monitoring the backend progress of fuzzing testing. Ant Design Pro provides a lot of light scaffolds and easy to migrate to new products which could accelerate my learning journey of picking a frontend knowledge. Backend is built by Django which is a python backend framework. Django supports interface with React and MySQL, and it is also a very popular framework among startup companies. Database is based on MySQL and distributed system is implemented by docker and docker swarm. Compared to Kubernetes, which is also for distributed system, docker and docker swarm are much lighter and easier to control.