Allison Husain

Summary: Trail of Bits released an experimental coverage-guided fuzzer called Honeybee that records program control flow using Intel Processor Trace (IPT) technology. The work, by UC Berkeley's Allison Husain during a winter internship, focused on addressing IPT's previously documented underperformance caused by capture-system issues and inefficient trace analyses.
Bottom line: Fuzzing is a core method for finding exploitable bugs before attackers do, and IPT's known underperformance has limited how much of a program's control flow could be observed during test runs; Honeybee's experimental approach to that bottleneck is worth tracking for teams that depend on fuzzing coverage to judge how well their code is tested.

Read the original at Trail of Bits Blog ↗