On February 3rd I will be speaking at Black Hat DC. The talk is about fuzzing. Today Microsoft has its SDL, Abobe has apparently started fuzzing its own products and other companies are doing the same as well. The bottom line is that fuzzing is getting harder for us. In the talk I will explain how to create a new type of fuzzer by combining static analysis metrics and dynamic analysis techniques. This new approach will ease the process of fuzzing by totally removing the data-modeling part that is usually necessary with generation-based fuzzers. At the same time it will have better results than mutation-based fuzzers. I have written about some of the techniques/metrics used in the fuzzer in my previous blog posts. So to have a taste of the talk here are a few links: cyclomatic complexity, loop detection and code coverage.
Anyway if you happen to be in DC during Black Hat or in NYC a few days after (4 -7 February) and you want to talk with me about:
- Reverse engineering and the like : you have a problem that’s driving you crazy, you can solve one of those problems for me or you want to show me something very cool you are working on.
- Our products: you want more info, you know how to improve them, you want to congratulate me because they are *so* cool
- You feel generous and want to offer me a beer
- You want to insult me because this blog post is *very* annoying
Send me an email!
After the conference I will do a follow-up post with slides, white paper, code and what you have missed at the conference.
Cheers,
Vincenzo
will be looking forward to your talk!
[though i couldn’t be there =( ]