|
|
|
Introducing Choronzon an approach at knowledge-based evolutionary fuzzing
|
Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Introducing Choronzon an approach at knowledge-based evolutionary fuzzing
Par www.census labs.comLe [2015-12-04] à 17:55:39
Présentation : CENSUS researchers Nikolaos Naziridis and Zisis Sialveras have recently presented their research on knowledge-based evolutionary fuzzing, at ZeroNights 2015 in Moscow, Russia. The talk introduced a cross-platform evolutionary fuzzing framework, that will be released as a free and open-source tool. The tool that was created as a result of this research is a file format fuzzer that uses evolutionary algorithms to produce new test files. The target file format is described by the user, via a simple python API which can focus the fuzzer to a specific subset of features of the target application. In the talk, we discussed the reasons we had to develop the fuzzer, along with the thought process that led us to the current list of supported features in Choronzon. We presented the tool s architecture, its design and engineering approach as well as the problems we have faced and the solutions we came up with. Finally, we compared the different fuzzing strategies implemented in other feedback-driven fuzzers, namely honggfuzz and AFL against the techniques we used in Choronzon. You may find the slide deck here. The conference was a fun experience with a lot of interesting content this year. Many thanks to the organizing committee, as well as the team of volunteers for all their efforts to ease our stay in Moscow and facilitate our talk. Les mots clés de la revue de presse pour cet article : fuzzing Les videos sur SecuObs pour les mots clés : fuzzing Les mots clés pour les articles publiés sur SecuObs : fuzzing Les derniers articles du site "www.census labs.com" :- GDCM buffer overflow in ImageRegionReader ReadIntoBuffer
- GDCM out of bounds read in JPEGLSCodec DecodeExtent
- Introducing Choronzon an approach at knowledge-based evolutionary fuzzing
- The road to efficient Android fuzzing
- Introducing wifiphisher - BSides London 2015
- Fuzzing Objects dART - Hack In The Box 2015 Amsterdam
- ORLYEH The Shadow over Firefox INFILTRATE 2015
- DTrace talk at CONFidence 2015
- 5th InfoCom Security Conference
- 5th InfoCom Mobile World Conference
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.190.17.190 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.190.17.190 to any 80"
- Nous contacter par mail
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre |
| Mini-Tagwall de l'annuaire video : | | | | curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
