Michel de Graaf

Michel de Graaf

Amsterdam, Noord-Holland, Nederland
2K volgers Meer dan 500 connecties

Info

Focused on backend & architecture & infrastructure: #ruby #elixir #javascript…

Activiteit

Neem nu deel om alle activiteiten te bekijken

Ervaring

  • Revive-capital

    Maarssen, Utrecht, Netherlands

  • -

    Amsterdam Area, Netherlands

  • -

    Amsterdam

  • -

    Maarssen, Utrecht, Netherlands

  • -

    Delft, South Holland, Netherlands

  • -

    Amsterdam Area, Netherlands

  • -

    Amsterdam Area, Netherlands

  • -

    Rotterdam Area, Netherlands

  • -

  • -

    Amsterdam

  • -

  • -

  • -

    Amsterdam Area, Netherlands

  • -

    Lieshout

  • -

  • -

    Amsterdam Area, Netherlands

  • -

Opleiding

  • Universiteit van Amsterdam grafisch

    Universiteit van Amsterdam

    -

    For my master thesis I researched Intelligent fuzzing of web-applications.
    http://re-invention.nl/intelligent_fuzzing_of_web-applications-michel_de_graaf-v1.0.pdf

  • -

    - Graduated cum laude
    - Graduation internship at the Philips Innovation Lab, worked on the European funded Amigo project (http://www.hitech-projects.com/euprojects/amigo/)

Licenties en certificaten

Publicaties

  • Intelligent fuzzing of web applications

    UvA

    Fuzz testing (also known as fuzzing) is a blackbox testing technique for finding flaws in software by feeding random input into applications and monitoring for crashes.
    Programs that generate fuzz data are called fuzzers and they generate input data that test engineers might not think of. There are two categories of fuzzers, unintelligent (UF) and intelligent (IF). The difference lies in the method of input data generation. UF has no prior knowledge of the input format while IF knows the…

    Fuzz testing (also known as fuzzing) is a blackbox testing technique for finding flaws in software by feeding random input into applications and monitoring for crashes.
    Programs that generate fuzz data are called fuzzers and they generate input data that test engineers might not think of. There are two categories of fuzzers, unintelligent (UF) and intelligent (IF). The difference lies in the method of input data generation. UF has no prior knowledge of the input format while IF knows the format which enables it to specify semi-valid data for what its attempting to fuzz.
    Sources like [21, 20] have indicated that user input in web applications are a huge problem. Fuzzing might prove to be a valuable method for finding flaws in these types of applications. However, the research that has been done on fuzzing web applications [6] have made use of UF. In this thesis we will introduce and evaluate an IF method based on validators.
    Many modern web applications are developed using specialized web frame- works that make use of validators that validate incoming input before further actions are taken by the application.
    Our hypothesis is that the data generated by a UF will often be evaluated as invalid by validators that are in place and will therefore have superficial code coverage. Intelligent fuzz data that is generated within validator constraints will have better code coverage and will therefore trigger more flaws.
    In order evaluate the effectiveness of our IF method we have fuzzed a set of typical web applications using 3 different fuzzing methods: UF, our IF method and fuzzing with manually defined fuzz format specifications.
    The results of this experiment indicate that our method of intelligent fuzzing performs marginally better while requiring more manual effort. This manual effort can be further automated, which would make it a valuable addition to fuzzing web applications.

    Publicatie weergeven

Projecten

  • Nachtwacht

    - heden

    Traffic and parking enforcement systems for the newest generation of license plate detection cameras. Ruby on Rails

    Andere bijdragers
    Project weergeven
  • SleepCoach

    -

    The aim of SleepCoach project was to give consumers with sleep problems easy access to cognitive behavioral therapy (CBT) via an automated coach. For this a sleep measurement device, a data upload client and a coaching website were developed.

    Andere bijdragers

Talen

  • Dutch

    Moedertaal of tweetalig

  • English

    Volledige professionele vaardigheid

  • German

    Beperkte werkvaardigheid

Ontvangen aanbevelingen

Meer activiteiten van Michel

Bekijk het volledige profiel van Michel

  • Bekijk wie u allebei kent
  • Word voorgesteld
  • Neem rechtstreeks contact op met Michel
Word lid en bekijk het volledige profiel

Overige vergelijkbare profielen

Anderen hebben Michel de Graaf genoemd in Nederland

Voeg nieuwe vaardigheden toe met behulp van deze cursussen