Entries:
Comments:
Posts:

Loading User Information from Channel 9

Something went wrong getting user information from Channel 9

Activity Profile

Latest Achievement:

Loading User Information from MSDN

Something went wrong getting user information from MSDN

Visual Studio Achievements

Latest Achievement:

Loading Visual Studio Achievements

Something went wrong getting the Visual Studio Achievements

Patrice Godefroid - Automated Whitebox Fuzz Testing with SAGE

Posted: Jul 14, 2009 at 11:29 AM
By: Peli de Halleux
Avg Rating: 5

(2)
57,321 Views
4 Comments
reddit

Tweet

10 minutes, 44 seconds

format
< > embed
+ queue

Sign In first to access your queue.
Close

Sorry, video was not added to the queue, an error occurred. Please Contact Us and let us know.
Close

Embed code for this video

Copy the code above to embed our video on your website/blog.

Video format

Option selected may change based on video formats available and browser capability.

Auto
Use our suggested format for this video.
Smooth Streaming
Adaptive bitrate streaming - little buffering but lower video quality at times of low bandwidth. Silverlight 5 required
Progressive
Traditional buffered video format. Silverlight 5 required
HTML5
For browsers that support H.264 MP4 or WebM video playback such as:
IE9+, Firefox 4+, Chrome 5+, or Safari 4+.
Flash
For browsers that have the Adobe Flash Player plugin installed.

Download

Right click “Save as…”

High Quality WMV (PC, Xbox, MCE)

File size
190.9 MB
MP3 (Audio only)

File size
4.9 MB
MP4 (iPod, Zune HD)

File size
60.7 MB
Mid Quality WMV (Lo-band, Mobile)

File size
86.9 MB

Patrice Godefroid gives an overview of Automated Whitebox Fuzz Testing, a powerful testing technique applied at Microsoft through a tool called SAGE. Listen how he is working with the SAGE team to 'eradicate all buffer overrun bugs' in Windows...

Read more in this paper or this slide deck.

The Research in Software Engineering team (RiSE) coordinates Microsoft's research in Software Engineering in Redmond, USA.

Follow the Discussion

Follow
Oops, something didn't work.

Try again?

Sign In to be begin to follow these comments

What does this mean?
Following an item on Channel 9 allows you to watch for new content and comments that you are interested in. You need to be signed in to Channel 9 to use this feature.

Getting "follow" information

Stop following these comments

Start following these comments

What does this mean?
Following an item on Channel 9 allows you to watch for new content and comments that you are interested in and view them all on your notifications page.

Removing your "follow"

Setting up your "follow"

Did you know you can
sign up for email notifications?
- Subscribe to this comments

aL_ Kinect ftw

Jul 14, 2009 at 4:45 PM

cool but isnt this pex? maybe sage is the new name for pex?
patriceg

Jul 14, 2009 at 5:19 PM

SAGE and Pex both use some of the same techniques (like DART), but SAGE is for security testing of unmanaged code (x86 binary analysis) while Pex is for unit testing of managed code (MSIL .NET binaries).

For more information on how they differ, please see http://research.microsoft.com/en-us/um/people/pg/public_psfiles/ieeesw2008.pdf

Patrice
aL_ Kinect ftw

Jul 15, 2009 at 9:35 AM

i see, thanks
cdwatkins

Jul 16, 2009 at 8:13 AM

Makes you wonder just how many advances we are going to get because of symbolic anylsis of constraints.

Remove this comment

Remove this thread

Comments Closed

Comments have been closed since this content was published more than 30 days ago, but if you'd like to continue the conversation, please create a new thread in our Forums,
or Contact Us and let us know.