Patrice Godefroid - Automated Whitebox Fuzz Testing with SAGE
- Posted: Jul 14, 2009 at 11:29 AM
- 55,516 Views
- 4 Comments
Download
How do I download the videos?
- To download, right click the file type you would like and pick “Save target as…” or “Save link as…”
Why should I download videos from Channel9?
- It's an easy way to save the videos you like locally.
- You can save the videos in order to watch them offline.
- If all you want is to hear the audio, you can download the MP3!
Which version should I choose?
- If you want to view the video on your PC, Xbox or Media Center, download the High Quality WMV file (this is the highest quality version we have available).
- If you'd like a lower bitrate version, to reduce the download time or cost, then choose the Medium Quality WMV file.
- If you have a Zune, WP7, iPhone, iPad, or iPod device, choose the low or medium MP4 file.
- If you just want to hear the audio of the video, choose the MP3 file.
Right click “Save as…”
- High Quality WMV (PC, Xbox, MCE)
- MP3 (Audio only)
- MP4 (iPod, Zune HD)
- Mid Quality WMV (Lo-band, Mobile)
Patrice Godefroid gives an overview of
Automated Whitebox Fuzz Testing, a powerful testing technique applied at Microsoft through a tool called SAGE. Listen how he is working with the SAGE team to 'eradicate all buffer overrun bugs' in Windows...
- Read more in this paper or this slide deck.
The Research in Software Engineering team (RiSE) coordinates Microsoft's research in Software Engineering in Redmond, USA.
Comments Closed
Comments have been closed since this content was published more than 30 days ago, but if you'd like to continue the conversation,
please create a new thread in our Forums,
or
Contact Us and let us know.
Follow the Discussion
cool
but isnt this pex? maybe sage is the new name for pex?
SAGE and Pex both use some of the same techniques (like DART), but SAGE is for security testing of unmanaged code (x86 binary analysis) while Pex is for unit testing of managed code (MSIL .NET binaries).
For more information on how they differ, please see http://research.microsoft.com/en-us/um/people/pg/public_psfiles/ieeesw2008.pdf
Patrice
i see, thanks
Makes you wonder just how many advances we are going to get because of symbolic anylsis of constraints.
Remove this comment
Remove this thread
close