Earlier quoted context omitted.
One nice way of describing fuzzing is that it is running a search problem (searching for bugs) using more or less guided Monte Carlo method for the program's input space. Generally the testing should also be automated (test case injection and testing oracle), so that one can beat the program with enough test cases for the fuzzing to be viable. Relating to the practical example: if one is trying to find bugs from the…
I like the way you treat fuzzing as search program.
Re: Gremlin.js: Throw a thousand monkeys at your page
#31It's a nice way of summing up the general principle. Unfortunately I can't take the credit for coming up with that one :-)