🗊Презентация Advanced Fuzzing with Peach 2

Нажмите для полного просмотра!
Advanced Fuzzing with Peach 2, слайд №1Advanced Fuzzing with Peach 2, слайд №2Advanced Fuzzing with Peach 2, слайд №3Advanced Fuzzing with Peach 2, слайд №4Advanced Fuzzing with Peach 2, слайд №5Advanced Fuzzing with Peach 2, слайд №6Advanced Fuzzing with Peach 2, слайд №7Advanced Fuzzing with Peach 2, слайд №8Advanced Fuzzing with Peach 2, слайд №9Advanced Fuzzing with Peach 2, слайд №10Advanced Fuzzing with Peach 2, слайд №11Advanced Fuzzing with Peach 2, слайд №12Advanced Fuzzing with Peach 2, слайд №13Advanced Fuzzing with Peach 2, слайд №14Advanced Fuzzing with Peach 2, слайд №15Advanced Fuzzing with Peach 2, слайд №16Advanced Fuzzing with Peach 2, слайд №17Advanced Fuzzing with Peach 2, слайд №18Advanced Fuzzing with Peach 2, слайд №19Advanced Fuzzing with Peach 2, слайд №20Advanced Fuzzing with Peach 2, слайд №21Advanced Fuzzing with Peach 2, слайд №22Advanced Fuzzing with Peach 2, слайд №23Advanced Fuzzing with Peach 2, слайд №24Advanced Fuzzing with Peach 2, слайд №25Advanced Fuzzing with Peach 2, слайд №26Advanced Fuzzing with Peach 2, слайд №27Advanced Fuzzing with Peach 2, слайд №28Advanced Fuzzing with Peach 2, слайд №29Advanced Fuzzing with Peach 2, слайд №30Advanced Fuzzing with Peach 2, слайд №31Advanced Fuzzing with Peach 2, слайд №32Advanced Fuzzing with Peach 2, слайд №33Advanced Fuzzing with Peach 2, слайд №34Advanced Fuzzing with Peach 2, слайд №35Advanced Fuzzing with Peach 2, слайд №36Advanced Fuzzing with Peach 2, слайд №37Advanced Fuzzing with Peach 2, слайд №38Advanced Fuzzing with Peach 2, слайд №39Advanced Fuzzing with Peach 2, слайд №40

Вы можете ознакомиться и скачать презентацию на тему Advanced Fuzzing with Peach 2. Доклад-сообщение содержит 40 слайдов. Презентации для любого класса можно скачать бесплатно. Если материал и наш сайт презентаций Mypresentation Вам понравились – поделитесь им с друзьями с помощью социальных кнопок и добавьте в закладки в своем браузере.

Слайды и текст этой презентации


Слайд 1





Advanced Fuzzing with Peach 2
MICHAEL EDDINGTON
MIKE@LEVIATHANSECURITY.COM
Описание слайда:
Advanced Fuzzing with Peach 2 MICHAEL EDDINGTON MIKE@LEVIATHANSECURITY.COM

Слайд 2





Agenda
Introduction to Peach 2
Data mutations
Peach State Machine
Peach Farm
Peach in The Middle
Описание слайда:
Agenda Introduction to Peach 2 Data mutations Peach State Machine Peach Farm Peach in The Middle

Слайд 3





Introduction to Peach 2
Описание слайда:
Introduction to Peach 2

Слайд 4





Peach 1
Framework for writing fuzzers
Instrumentation via wrapper APIs
No data definition layer (DDL), just fuzzer
Steep learning curve
Complex fuzzers result in complex fuzzer code
Описание слайда:
Peach 1 Framework for writing fuzzers Instrumentation via wrapper APIs No data definition layer (DDL), just fuzzer Steep learning curve Complex fuzzers result in complex fuzzer code

Слайд 5





Peach 2
Reduce creation time and simplify fuzzer generation
Fuzzer platform, not framework
Modeling based approach
Fault detection
Lower learning curve
Описание слайда:
Peach 2 Reduce creation time and simplify fuzzer generation Fuzzer platform, not framework Modeling based approach Fault detection Lower learning curve

Слайд 6





Modeling Based Fuzzing
Model types and data
Model state machine
Support models with data sets
Mutate models with mutators
Описание слайда:
Modeling Based Fuzzing Model types and data Model state machine Support models with data sets Mutate models with mutators

Слайд 7





Model Data: Types
Описание слайда:
Model Data: Types

Слайд 8





Model Data: Relationships
Описание слайда:
Model Data: Relationships

Слайд 9





Model Data: State Model
Описание слайда:
Model Data: State Model

Слайд 10





Benefits of Modeling
Easy reuse of definitions
Complex mutations can be applied to a model
Improvements to data generation or mutation independent of model
Data read into definition as well as generated
Описание слайда:
Benefits of Modeling Easy reuse of definitions Complex mutations can be applied to a model Improvements to data generation or mutation independent of model Data read into definition as well as generated

Слайд 11





Data Modeling
Define structure of data
Define relations in data
Reuse definitions
Описание слайда:
Data Modeling Define structure of data Define relations in data Reuse definitions

Слайд 12





State Modeling
Описание слайда:
State Modeling

Слайд 13





State Modeling
Stream
Описание слайда:
State Modeling Stream

Слайд 14





State Modeling: Stream
Описание слайда:
State Modeling: Stream

Слайд 15





State Modeling: Stream
Описание слайда:
State Modeling: Stream

Слайд 16





State Modeling: Stream
Описание слайда:
State Modeling: Stream

Слайд 17





State Modeling: Call
Описание слайда:
State Modeling: Call

Слайд 18





Data Mutations
Описание слайда:
Data Mutations

Слайд 19





Mutation: String
Описание слайда:
Mutation: String

Слайд 20





Mutation: Number
Описание слайда:
Mutation: Number

Слайд 21





Mutation: Size Relation #1
Length: 
Data:
Описание слайда:
Mutation: Size Relation #1 Length: Data:

Слайд 22





Mutation: Size Relation #2
Length:
Data:
Описание слайда:
Mutation: Size Relation #2 Length: Data:

Слайд 23





Mutation: Size Relation #3
Data & Length:
Описание слайда:
Mutation: Size Relation #3 Data & Length:

Слайд 24





Mutation: State
Описание слайда:
Mutation: State

Слайд 25





Mutation: State
Описание слайда:
Mutation: State

Слайд 26





Mutation: State
Описание слайда:
Mutation: State

Слайд 27





Add Custom Mutators
Sling some Python
Add additional mutations
Specific mutations
Etc.
Описание слайда:
Add Custom Mutators Sling some Python Add additional mutations Specific mutations Etc.

Слайд 28





Fault Detection
AND DATA COLLECTION
Описание слайда:
Fault Detection AND DATA COLLECTION

Слайд 29





Agents & Monitors
Описание слайда:
Agents & Monitors

Слайд 30





2 Tier Configuration
Описание слайда:
2 Tier Configuration

Слайд 31





Monitors
Debuggers
Process Monitor
Memory Monitor
Network Capture
VM Control (snapshot, revert)
Networked Power Strips (cycle power)
Easy to implement custom monitors
Описание слайда:
Monitors Debuggers Process Monitor Memory Monitor Network Capture VM Control (snapshot, revert) Networked Power Strips (cycle power) Easy to implement custom monitors

Слайд 32





Peach Development
Описание слайда:
Peach Development

Слайд 33





Documented XML Schema
Описание слайда:
Documented XML Schema

Слайд 34





Peach Builder
Описание слайда:
Peach Builder

Слайд 35





Peach Shark
Описание слайда:
Peach Shark

Слайд 36





Peach Farm
MASSIVELY PARALLEL FUZZING
Описание слайда:
Peach Farm MASSIVELY PARALLEL FUZZING

Слайд 37





Peach Farm
Adam Cecchetti 
Massively Parallel Fuzzing 
Scales from 1 to 10,000 nodes 
Choose your Virtual Platform/Hosting
EC2, Xen, VMWare, Etc
Utilizes Map/Reduce Algorithm 
Map: Maps the fuzzing cases to indexes and results
Reduce: Reduces fuzzing results to interesting cases
Metric based : Time, size, diff, expected errors, OS faults, crashes
Описание слайда:
Peach Farm Adam Cecchetti Massively Parallel Fuzzing Scales from 1 to 10,000 nodes Choose your Virtual Platform/Hosting EC2, Xen, VMWare, Etc Utilizes Map/Reduce Algorithm Map: Maps the fuzzing cases to indexes and results Reduce: Reduces fuzzing results to interesting cases Metric based : Time, size, diff, expected errors, OS faults, crashes

Слайд 38





Peach in The Middle
WHAT’S NEXT?
Описание слайда:
Peach in The Middle WHAT’S NEXT?

Слайд 39





Peach in The Middle
Описание слайда:
Peach in The Middle

Слайд 40





Q & A
HTTP://PEACHFUZZ.SF.NET

HTTP://PHED.ORG

MIKE@LEVIATHANSECURITY.COM
Описание слайда:
Q & A HTTP://PEACHFUZZ.SF.NET HTTP://PHED.ORG MIKE@LEVIATHANSECURITY.COM



Похожие презентации
Mypresentation.ru
Загрузить презентацию