# Effective Fuzzing: From Noise to SIGSEGV

- Institution: CERN
- Department: CERN Computing Seminar
- Speaker: Shawn Denbow
- Year: 2019
- Language: English
- Subjects: Computer science
- Source: [CERN](https://videos.cern.ch/record/3010014)
- Licence: [CERN](http://copyright.web.cern.ch)
- Who can watch: Tweens profiles and older (sources give no ratings; placed by Invisible Network from the source's own words)

The term "fuzzing" was coined in the late 1980s as part of a class project at the University of Wisconsin. The goal of the project was to test the reliability of Unix programs by providing randomized inputs and monitoring for abnormal behavior. Since then, fuzzing has taken off as one of the foremost ways to uncover bugs in software of all forms.

In this talk, we'll take a brief tour of the history of fuzzing and look at how it has evolved over time. We'll discuss the various techniques developed over time and learn to apply them in an effective / efficient manner. I'll provide insight into my experiences with fuzzing and finish the presentation with details and a demo of a tool I developed to bring coverage-guided fuzzing to the MS Windows kernel.

About the speaker

Shawn Denbow is currently a software engineer in Microsoft's Base Platform Technologies team working. Previously he worked as a security engineer in Microsoft's Platform Security & Vulnerability Research team helping secure Hyper-V. His main interests are application security, reverse engineering and virtualization security. Before joining Microsoft, Shawn spent 4 years in the U.S. Air Force conducting cyber operations. .

0:00:00 Slide 1

0:01:58 Slide 2

0:02:33 Slide 3

0:03:07 Slide 4

0:03:51 Slide 5

0:04:11 Slide 6

0:04:19 Slide 7

0:04:43 Slide 8

0:04:47 Slide 9

0:07:32 Slide 10

0:09:01 Slide 11

0:09:12 Slide 12

0:09:16 Slide 13

0:09:27 Slide 14

0:09:44 Slide 15

0:09:59 Slide 16

0:10:06 Slide 17

0:10:23 Slide 18

0:10:32 Slide 19

0:10:36 Slide 20

0:10:42 Slide 21

0:10:53 Slide 22

0:11:12 Slide 23

0:11:30 Slide 24

0:11:55 Slide 25

0:14:36 Slide 26

0:16:52 Slide 27

0:18:39 Slide 28

0:21:19 Slide 29

0:23:00 Slide 30

0:23:54 Slide 31

0:24:19 Slide 32

0:26:01 Slide 33

0:27:49 Slide 34

0:28:49 Slide 35

0:29:59 Slide 36

0:31:05 Slide 37

0:31:55 Slide 38

0:32:41 Slide 39

0:32:45 Slide 40

0:32:53 Slide 41

0:33:23 Slide 42

0:33:27 Slide 43

0:33:31 Slide 44

0:33:50…

## Lectures

1. [Effective Fuzzing: From Noise to SIGSEGV](https://invisiblenetwork.ai/learn/cern/3010014/1f1c7f7b2897), 47 min (CERN's player)