Creating a Project

Black Duck DefensicsĀ® User Guide

Version
latest

In order to perform fuzz testing on Defensics, you need to create a project. A project can be for a smaller piece of software or a large system.

A project is the home for your system under test (SUT). It stores the test plan for the SUT in the form of protocol suite configurations. Add as many configurations as needed to cover the testing of the attack surface of your SUT. At a minimum, you'll have one configuration per protocol, but you can have multiple to test different configurations or deployments of the SUT. Also, testing different features of the protocol may require their own Defensics test suite configurations. Tests are repeatable when using configuration; you can keep track of the test plan execution on the project view for any configuration.

Defensics does not limit how to use the project over the test target lifetime and different versions. You can choose to either maintain the project configurations or create a new project as your project and attack surface evolves.

Figure 1. Creating a project

Creating a project in Defensics:

  1. In Defensics, click on New Project and enter a name for your project.
  2. Create one or more configurations. A configuration is specific for a test suite and you will start by selecting the test suite and loading the test suite. Enter a name for your configuration. You are prompted to click on Test Suite Manager.

    Figure 2. Create configuration
  3. Select a test suite for your configuration. The last loaded test suites are displayed. Click on Load Test Suite to load the selected test suite or click on Test Suite Manager to see all available suites.
    Figure 3. Select test suite
  4. The test suite is loaded. You are ready to configure your test suite and Start Test Run.
  • You can create as many projects as you want.
  • A project can have as many configurations as you need.

Configuring Your Test Suite

Once you have created your project and selected your test suite, you are ready to configure your test suite.

Figure 4. Configuring Your Test Suite
  1. Go to Protocol and Network. The Basic Settings section contains the essential configuration to be able to connect with the SUT.
  2. Enter necessary details to perform a test run. In the example case of HTTP Server, HTTP URI is the minimum required information.
  3. Go through the other settings in your test suite according to the needs of your test target.
  4. Test interoperability in Test Design. See Interoperability for more details.