Live data from Hacker News

Ask HN: What is the emerging state of the art in fuzzing techniques?

news.ycombinator.com

51–54 of 54 posts

Re: Ask HN: What is the emerging state of the art in fuzzing techniques?

#51
post #28

Earlier quoted context omitted.

Why not?

Would you accompany a movie recommendation with a piratebay link on HN?

It's standard practice in many, many online fora to accompany song recommendations with YouTube links.

Re: Ask HN: What is the emerging state of the art in fuzzing techniques?

#52

My friend is working on some next gen fuzzing stuff here: https://github.com/2trill2spill/nextgen

Thanks for the shout out, But I'm the nextgen author If anyone has any questions, comments, bugs, whatever. The project was started because of frustrations with AFL and trinity. The "novel" feature at this point is using dtrace for instrumentation instead of a compiler plugin like AFL. This allows for instrumenting closed sourced applications without using qemu and non C/C++ applications. I have more planned for the future but I'm trying finish the core of nextgen, mainly the logging, interprocess communication, and concurrency model.

Re: Ask HN: What is the emerging state of the art in fuzzing techniques?

#53
post #30
post #25

in general, have a poke around https://fuzzing.info/papers/ First, I think the next big step in fuzzing will actually be a complement to fuzzing - solving. AFL and friends can bitbang their way to massive code coverage, but can still fail on fairly simple testcases. Some recent research[1] by the authors of Angr[2] show that by pairing the brute-force coverage and exception discovery of a tool like AFL with constrain…

Why "infamous"?

I have no idea why I wrote that, bad wording.

Re: Ask HN: What is the emerging state of the art in fuzzing techniques?

#54

Here you have some interesting work from Fabien Duchene, ENSIMAG/CEA researcher, about black-box genetic fuzzing (I know it sounds like a lot of buzzwords, and in fact it was a little bit mocked during SSTIC 2016, but it's some really good stuff !) http://hal.univ-grenoble-alpes.fr/hal-00978844/ https://dl.acm.org.sci-hub.cc/citation.cfm?id=2557550&dl=ACM...

codaspy paper seems here http://car-online.fr/en/spaces/fabien_duchene/publications/2...
Post reply on HN