< Retour au sommaire

Efficient and Scalable Fuzzing of Complex Software Stacks

Thorsten Holz le

Lieu: bât 862, pièce 1073

Suivre en visio

Abstract

In this talk, I will give an overview of our recent progress in randomized testing (“fuzzing”) and present some of the methods we have developed in the last few years. These include fuzzing of operating system kernels and hypervisors, grammar-based fuzzing of complex interpreters, and fuzz testing of embedded systems. The talk will focus on our recent work on Fuzztruction, a novel perspective on generating inputs in highly complex formats without relying on heavyweight program analysis techniques, coarse-grained grammar approximation, or a human domain expert. I will conclude the talk with an outlook on challenges yet to be solved.