I would have a look at Project Zero.
P.S. I think many governments and corporations would keep their fuzzing techniques quite secret. You don't want to do the same fuzzing as anyone else.
P.S. I think many governments and corporations would keep their fuzzing techniques quite secret. You don't want to do the same fuzzing as anyone else.
I thought everyone dropped "security by obscurity" long time ago.
You want a unique bug that will last a long time. In which case, your fuzzing techniques are a trade secret. A lot of fuzzing advances take place behind closed doors.
Project Zero has some people with interesting backgrounds doing bug hunting for good.
I figure they're selling exploits (the ones they don't publicise) to governments.
Obscurity is effective as one layer in a layered defense.
"Defense in depth".