NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software
Section 2: Recommended minimum standard for developer testing – NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software

NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software 2.9: Fuzz the software

What does 2.9 require?

A fuzzer is used to feed the software many generated or mutated inputs, with a reasonable time or budget allowance, so that crashes, hangs and unexpected behaviour are found. Where components interact, the whole system is also fuzzed as one, and design review indicates which input vectors deserve priority.

Maintained by Gerard Blokdyk

Other controls in Section 2: Recommended minimum standard for developer testing – NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.