How the Fuzzing Process Is Built at Yandex
summary
Describes how Yandex automates detection of memory-corruption vulnerabilities by fuzzing its services, detailing the fuzzing platform’s internal architecture and coordination mechanisms. Explains how Yandex leverages its internal compute/resources to speed up fuzzing and discusses unexpected engineering problems encountered while building the platform.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:13Fuzzing basics and history
- 3:38Fuzzing goals beyond bugs
- 8:40Advanced fuzzing techniques
- 13:59Fuzzing at Yandex
- 18:16Yandex fuzzing platform goals
- 23:14Fuzzing challenges
- 27:49Fuzzing limitations
- 30:22Future of fuzzing
- 34:16Q&A
related talks
44mFuzzing in Go: Fear, Despair, Acceptance and the Long-Awaited Success
31m“Fuzz or lose..."
53mFuzz Testing for Fun and Profit
38mFuzzing or Testing with Garbage Data
39mFuzzing Session: Finding Bugs and Vulnerabilities Automatically
47mFuzzing Your Code
01h 15mMake your programs more reliable with Fuzzing
44mAn Introduction to Fuzzers