Learn · CERN

Talk47 min

Effective Fuzzing: From Noise to SIGSEGV

Shawn Denbow · CERN

Watch At CERN

About

The term "fuzzing" was coined in the late 1980s as part of a class project at the University of Wisconsin. The goal of the project was to test the reliability of Unix programs by providing randomized inputs and monitoring for abnormal behavior. Since then, fuzzing has taken off as one of the foremost ways to uncover bugs in software of all forms.

In this talk, we'll take a brief tour of the history of fuzzing and look at how it has evolved over time. We'll discuss the various techniques developed over time and learn to apply them in an effective / efficient manner. I'll provide insight into my experiences with fuzzing and finish the presentation with details and a demo of a tool I developed to bring coverage-guided fuzzing to the MS Windows kernel.

About the speaker

Shawn Denbow is currently a software engineer in Microsoft's Base Platform Technologies team working. Previously he worked as a security engineer in Microsoft's Platform Security & Vulnerability Research team helping secure Hyper-V. His main interests are application security, reverse engineering and virtualization security. Before joining Microsoft, Shawn spent 4 years in the U.S. Air Force conducting cyber operations. .

0:00:00 Slide 1

0:01:58 Slide 2

0:02:33 Slide 3

0:03:07 Slide 4

0:03:51 Slide 5

0:04:11 Slide 6

0:04:19 Slide 7

0:04:43 Slide 8

The talk

  1. Effective Fuzzing: From Noise to SIGSEGV 2019-03-20 · 47 min · CERN's player

Credits and licence

Institution
CERN
Department
CERN Computing Seminar
Speaker
Shawn Denbow
Year
2019
Language
English
Subjects
Computer science
Source
CERN
Licence
CERN, as CERN states it. CERN's terms
Attribution
© CERN. CERN provides its audiovisual media free of charge for educational and informational use, credited to CERN; this lecture is shown in CERN's own player.
Who can watch
CERN gives no rating. Invisible Network shows it to Tweens profiles and older, judged from what the source says about it. How courses are placed