Adventures in Fuzzing - NYU Talk 2018

  Переглядів 8,015

gamozolabs

gamozolabs

День тому

Get the slides and audio here: github.com/gamozolabs/adventu...
Follow me on Twitter: / gamozolabs
I gave a talk at NYU about some of the major tools I've worked on over the years and why they came to be.

КОМЕНТАРІ: 5
@tekwizz123
@tekwizz123 4 роки тому
Went through this and wrote a rough timeline of this video in case it helps anyone: 0:00-1:33 About Me 1:33-3:15 Fuzzing Overview 3:15-3:58 Fuzzing Explained w Diagrams 3:58-6:08 Limitations of Fuzzing 6:08-6:48 Brief Explanation of Harnesses 6:48-12:25 Explanation of example fuzzing programs available today. 12:25-21:20 Coverage Guided Fuzzing and how this can improve code coverage by 20-30% 21:23-26:44 Crash Amplification using PageHeap/ASAN, adding hooks to program to find interesting cases. 26:44-27:47 Performance and why linear scaling is important, but why good input and targets are more important 27:47-30:24 Snapshot fuzzing and how it helps with deterministic fuzzing and performance. 30:24-32:11 Discussion of Brandon's career in security, explanation of symbolic fuzzing. 32:11-41:01 Explanation of Brandon's research into Chrome sandbox from a fuzzing and debugging perspective. Discussion of fruitsnack tool (custom allocator for Chrome). 41:01-45:47 Moving on to skeletor, VT-x hypervisor development, moving on to fuzzing entire systems in a system (Falkervisor/Brownie). 45:47-49:12 Explanation of Grilled Cheese improvements. 49:12-51:10 Experiments with QEMU and why it wasn't great for fuzzing. 51:10-52:31 Creating of Salad, a MIPS32 emulator. Adding of register coverage, why it wasn't useful. 52:31-52:48 Moving tools over to Rust 52:48-58:50 Discussion of work on Vectorized Emulation starting from 2017 onwards. 58:50-1:00:06 Discussion of modern day work that Brandon is working on such as wafflecone. 1:00:06-1:07:07 Questions
@mohithkalyan
@mohithkalyan 4 роки тому
Thanks
@0x4ndr3
@0x4ndr3 3 роки тому
Seriously, how did those kids just walk away from one of the most interesting presentations ever before it ends?
@kh0kh0
@kh0kh0 2 роки тому
GOD DAMN YOU ARE AMAZING
@kh0kh0
@kh0kh0 2 роки тому
LIVEOVERFLOW WAS RIGHT YOU ARE A GOD
Fuzzing: Runtime Bug Hunting | Synopsys
21:40
Synopsys
Переглядів 13 тис.
Fuzzing 101
41:19
BlinkOn
Переглядів 5 тис.
Анна Трінчер - Бар за баром (Official Music Video)
02:38
Анна Трінчер
Переглядів 1,8 млн
Помилка,  яку зробило військове керівництво 🙄
01:00
Радіо Байрактар
Переглядів 263 тис.
Bjarne Stroustrup: C++ | Lex Fridman Podcast #48
1:47:13
Lex Fridman
Переглядів 1 млн
GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs
51:00
Black Hat
Переглядів 306 тис.
Fuzzing with AFL - Erlend Oftedal
45:02
NDC Conferences
Переглядів 26 тис.
ClusterFuzz: Fuzzing at Google Scale
59:38
Black Hat
Переглядів 6 тис.
OffensiveCon19 - Ned Williamson - Modern Source Fuzzing
47:42
OffensiveCon
Переглядів 11 тис.
Big Tech AI Is A Lie
16:56
Tina Huang
Переглядів 37 тис.
afl-unicorn: Fuzzing The 'Unfuzzable' - Nathan Voss
24:49
0xdade
Переглядів 4,4 тис.
GitHub Copilot just got promoted to Captain
4:01
Fireship
Переглядів 290 тис.
Лучший телефон на андроиде?
0:25
Опросный
Переглядів 106 тис.
Start from 0 at any point on the T1 Digital Tape Measure
0:14
REEKON Tools
Переглядів 18 млн
Как открыть дверь в Jaecoo J8? Удобно?🤔😊
0:27
Суворкин Сергей
Переглядів 880 тис.