Fuzzing the Media Framework in Android

Recommendations

Info

Fuzzing Media Content in AndroidOverview• Create corrupt but structurally valid media files• Direct them to the appropriate decoders in Android• Monitor the system for potential issues• Pass the issues through a triage mechanism8
Fuzzing Media Content in AndroidSteps in a fuzzing campaign1. Identify type of input2. Identify entry point in the system3. Data generation4. Execution phase (actual fuzzing process)5. Monitor results (logging process)6. Triage phase9
Page 1 and 2: Fuzzing the Media Framework in Andr
Page 3 and 4: IntroductionFuzzing• Form of blac
Page 5 and 6: IntroductionAudio and video as atta
Page 7: AgendaIntroductionFuzzing Media Con
Page 11 and 12: AgendaIntroductionFuzzing Media Con
Page 13 and 14: Data generationBasic Fuzzing Framew
Page 15 and 16: Data generationFuzzBox• Multi-cod
Page 17 and 18: Data generationRadamsa• General p
Page 21 and 22: Fuzzing the Stagefright frameworkOv
Page 25 and 26: Logging and Triage MechanismsInitia
Page 27 and 28: Logging and Triage MechanismsInitia
Page 29 and 30: Logging and Triage MechanismsTestin
Page 31 and 32: Logging and Triage MechanismsTriage
Page 33 and 34: Logging and Triage MechanismsResult
Page 37 and 38: Fuzzing Stagefright with AFLAFL on

Fuzzing the Media Framework in Android

Create successful ePaper yourself

Delete template?

Save as template?