Скачать или смотреть 2022 - Introduction to modern fuzzing

https://media.ccc.de/v/froscon2022-27...

Find and fix vulnerabilities before they reach production.

This talk is a hands-on introduction to fuzz testing. After a basic introduction to fuzzing we will give a live demonstration of our open source fuzzing tools, supporting C/C++, Java, JavaScript and Go. They will showcase modern state-of-the-art fuzzing approaches and demonstrate the different kinds of bugs one can detect.

To get everyone on board we will take a short tour through the history and fundamentals of fuzzing before we look at the current state of fuzzing including code instrumentation for coverage guided fuzzing and bug detectors. We will find out what kind of bugs and vulnerabilities can be found with these techniques.
We will do this by taking a look on how we use this modern approaches at Code Intelligence (Bonn, https://www.code-intelligence.com/) to make fuzzing as easy as writing unit tests, including demonstrations of our OSS tools Jazzer (https://github.com/CodeIntelligenceTe...) and cifuzz (https://github.com/CodeIntelligenceTe....

Jochen Hilgers

https://programm.froscon.org/2022/eve...

#froscon2022 #Security