The Smart Fuzzer Revolution

Summary: A Trail of Bits keynote at BSidesLisbon argued that the last two years have seen greater advances in automated security testing than the ten before them, citing AFL, the DARPA Cyber Grand Challenge, and Microsoft's Project Springfield (SAGE). The talk traces fuzzing from a 1988 UW-Madison project assignment through DART, EXE, and Automated Whitebox Fuzz Testing, and asks how much longer humans remain part of the secure development lifecycle.
What's compelling: The speaker's own framing is that these tools' common availability has the potential for massive impact on the industry - which means the bug-finding capability your team treats as a specialty is becoming a commodity your adversaries can also pick up.

Read the original at Trail of Bits Blog ↗