Fuzz By Number

More documents

Recommendations

Info

Retrospective Testing (Cont.)PositivesMeasures how well fuzzers find real bugs in realprogramsNegativesIn good products, not many bugs come out in 6monthsSmall sample size - hard to draw conclusionsOld versions of fuzzers are being tested
Simulated VulnerabilityDiscoveryExperienced security researcher adds bugs to aproductBugs should be representative of the types of bugsfound in this product in the pastEach bug is verified to be reachable from an externalinterfaceAnother researcher uses fuzzers to try to find these“fake” bugs
Page 1 and 2: Fuzz By NumberMore Data About Fuzzi
Page 3 and 4: AgendaFuzzing, why we careHow do yo
Page 5 and 6: Generating Test CasesMutation-based
Page 7 and 8: Fuzzing LifecycleIdentifying interf
Page 9: Retrospective TestingTime period is
Page 13 and 14: Code Coverage AnalysisInstrument th
Page 15 and 16: Our TestingThree network protocolsT
Page 17 and 18: Introducing The FuzzersGeneral Purp
Page 19 and 20: TaofOpen source, mutation basedGUI
Page 21 and 22: Mu-4000Commercial fuzzer from Mu Se
Page 23 and 24: eSTORMCommercial, generation based
Page 25 and 26: What’s Missing?What about SPIKE,
Page 27 and 28: The Bugs17 bugs added to each appli
Page 29 and 30: Results!
Page 31 and 32: FTP - Summary% bugs found % code co
Page 33 and 34: SNMP Summary% bugs found % code cov
Page 35 and 36: DNS Summary% Bugs found % Code cove
Page 37 and 38: FTP OdditiesBugs 9, 12, and 13 were
Page 39 and 40: FTP Bug 16MODRET core_eprt(cmd_rec
Page 41 and 42: FTP Bug 4char *dir_canonical_path(p
Page 43 and 44: SNMP Bug #4int snmp_pdu_parse(netsn
Page 45 and 46: GeneralConclusions
Page 47 and 48: Generation Based ApproachMost Effec
Page 49 and 50: Protocol Knowledge Is Good% SNMP bu
Page 51 and 52: More Code Coverage...
Page 53 and 54: Statistics Says “Yes”Dep Var: B
Page 55 and 56: A Real BugAll this fuzzing with dif
Page 57 and 58: Special Thanks To:Commercial fuzzer

Fuzz By Number

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?