Method of Fuzzing Testing of Firewalls Using the Gray Box Method

This article describes an approach to creating a technique for fuzzing testing firewalls using the gray box method. This method makes it possible to test the information security tool in the absence of program code, but using the knowledge and skills of the administrator level. This article contains examples of tests and tools that can be recommended for performing test tasks. The essential for fuzzing testing of information security tools is justified by the requirements of the significant certifying government agency. Reports on fuzzing testing of firewalls should demonstrate the absence or presence of software errors that can create vulnerabilities. To ensure information security at critical infrastructure facilities, in state information systems and information systems for processing personal data, reliable information security tools should be used. The results of fuzzing testing are one of the indicators that show the level of trust in the information security tool.