News for hackers. Stuff that matters.

A comment on Evaluating Fuzz Testing. Parent comment

Re:Evaluating Fuzz Testing by hannob on Thursday September 06, 2018 @06:35AM (#17925216)
> It turns out pretty much every fuzzer evaluation to date has not been statistically rigorous.

Shall I tell you a not so well hidden secret? Almost nothing published in computer science, let alone in IT security, is statistically rigorous.

[ Parent | on HN ]
Re:Evaluating Fuzz Testing by Ar-Curunir on Thursday September 06, 2018 @01:14PM (#17927733)
That's not true; plenty of papers in the systems field perform careful and rigorous experiments. This doesn't even include the theory side of stuff, where you only have proofs, and no statistics to get wrong.
[ Parent | on HN ]