Autodafé: An Act of Software Torture
summary
Describes a novel buffer-overflow discovery method called “Fuzzing by weighting attacks with markers,” which augments automated fault-injection tools by inserting random data into inputs, buffers, or protocol packets and monitoring for memory violations. Focuses on improving the primitive but widely used automated vulnerability searchers (fuzzers) to make them more effective given the high prevalence of flaws in modern software.
AI-written summary · about
related talks
39mFuzzing: Finding Your Own Bugs and 0days!
31m“Fuzz or lose..."
01h 15mMake your programs more reliable with Fuzzing
11mIDFuzz: Intelligent Directed Grey-box Fuzzing
30mFuzzing Testing: Practical Applications
28mFuzzing Malware for Fun & Profit
21mFUZE: Towards Facilitating Exploit Generation for Kernel UAF Vulnerabilities
19mCAFault: Enhance Fault Injection Technique in Practical Distributed Systems via...