La tecnolog\u00eda patentada es el resultado de m\u00e1s de una d\u00e9cada de investigaci\u00f3n en la Universidad Carnegie Mellon. Consiste en una tecnolog\u00eda para desarrollar pruebas de software que asegure un adecuado nivel de calidad. Re\u00fane tecnolog\u00edas de fuzzing guiado y ejecuci\u00f3n simb\u00f3lica y ofrece seguridad continua cuando se integra en los ciclos de desarrollo de software.<\/p>\n
ForAllSecure has won a contract with the\u00a0Defense Innovation Unit\u00a0(DIU) for the deployment of its\u00a0next-generation fuzzing\u00a0solution.<\/span><\/p>\n Known as Mayhem, the solution will be implemented across the US Department of Defense\u2019s (DoD) several branches.<\/span><\/p>\n Under the $45m contract, the company will integrate its software security solution into some critical systems of the DoD.<\/span><\/p>\n Currently, Mayhem is used by the Naval Sea Systems Command (NAVSEA), the Air Force 90th Cyberspace Operations Squadron, the Air Force 96th Cyberspace Test Group and the US Army Command, Control, Communication, Computers, Cyber, Intelligence, Surveillance and Reconnaissance Center (C5ISR).<\/span><\/p>\n The patented technology is the result of more than a decade of research at Carnegie Mellon University.<\/span><\/p>\n It brings together technologies of guided fuzzing and symbolic execution and offers continuous security when integrated into software development cycles.<\/span><\/p>\n Guided fuzzing and symbolic execution are two dynamic application security testing (DAST) techniques.<\/span><\/p>\n ForAllSecure CEO David Brumley said: \u201cMayhem is the result of over two decades of research in how to identify critical software flaws first and not be slowed down by false positives. The benefits go beyond security.<\/span><\/p>\n \u201cMayhem automatically builds a test suite, lowering QA effort to create great and trustworthy software.<\/span><\/p>\n \u201cOur work with the DoD has showcased the powerful benefits of automation in code testing, using the combined technologies of symbolic execution and advanced fuzzing.\u201d<\/span><\/p>\n Following its win in the Defense Advanced Research Projects Agency (DARPA) Cyber Grand Challenge, the first prototype of Mayhem gained recognition in 2016.<\/span><\/p>\n