OPERATING SYSTEMSOS Linux

Fuzzing the Linux kernel | Linux Foundation Mentorship Session 2021

A talk about using fuzzing for finding vulnerabilities in the Linux kernel. I briefly cover ready-to-use fuzzers such as Trinity and syzkaller but mainly focus on the underlying parts: writing fuzzing harnesses, generating inputs, and collecting coverage.

Slides: https://docs.google.com/presentation/d/1qA1S_W8LBOPbXnu2xSIe9HvXNG2hK7tsXN10J4Xf2qw/edit?usp=sharing

Twitter: https://twitter.com/andreyknvl
Website: https://xairy.io/

00:00 Intro
01:57 Agenda
02:35 Fuzzing
11:30 Fuzzing the Linux kernel
32:24 Trinity and syzkaller
35:34 Fuzzing approaches
52:04 Fuzzing tips
57:50 Collecting coverage with KCOV
1:13:20 Final notes
1:16:20 Thanks and questions

source

by Andrey Konovalov

linux foundation