Главная
Study mode:
on
1
Intro
2
About me!
3
Solution: ClusterFuzz
4
ClusterFuzz: Architectural Ove
5
Crash Automation & Mana
6
Fuzzers: What infrastructure
7
Testcase Duplication Chec
8
Fuzzers: Types
9
Generation based fuzzers: Exa
10
Mutation Based Fuzzers: Examp
11
V8 Bounds check removal b
12
Evolutionary Fuzzers
13
Code Coverage: Platforms
14
Code Coverage: Aggregate View
15
Code Coverage: fuzzer_utils
16
Memory Debugging Tools: Exa
17
Scale, Scale and Scale
18
Fully reproducible & minimiz
19
Custom Minimizers
20
Resource Minimization
21
Tool Settings Correction: ASAN ex
22
Real-time regression and fixe
23
Findit: Culprit CL Finder
24
Findit: How it works
25
Testcase Report
26
Patched + Verified: 1 day
Description:
Explore Chrome's open-source distributed fuzzer, Clusterfuzz, in this 32-minute conference talk from nullcon Goa 2015. Gain insights into how Clusterfuzz utilizes over 3000 cores to fuzz Chrome across various platforms, discovering security vulnerabilities in real-time with reproducible test cases. Delve into detailed statistics on bug types found in Chrome and learn about the challenges of distributed fuzzing. Discover how to run your own fuzzers on the Clusterfuzz infrastructure and potentially earn Chrome bounties for uncovered bugs. The presentation covers Clusterfuzz's architectural overview, crash automation and management, fuzzer types and examples, code coverage analysis, memory debugging tools, and the process of reproducing and minimizing test cases. Additionally, learn about real-time regression fixes and the Findit tool for identifying culprit CLs.

Clusterfuzz

nullcon
Add to list
0:00 / 0:00