Patrice Godefroid - Automated Whitebox Fuzz Testing with SAGE

Posted By: Peli de Halleux | Jul 14th @ 11:29 AM | 50,204 Views | 4 Comments
Patrice Godefroid gives an overview of Automated Whitebox Fuzz Testing, a powerful testing technique applied at Microsoft through a tool called SAGE. Listen how he is working with the SAGE team to 'eradicate all buffer overrun bugs' in Windows...

The Research in Software Engineering team (RiSE) coordinates Microsoft's research in Software Engineering in Redmond, USA.
Rating:
1
0
#Jul 14th @ 4:45 PM
aL_
aL_
Rx ftw

cool Smiley but isnt this pex? maybe sage is the new name for pex?

#Jul 14th @ 5:19 PM
patriceg
patriceg

SAGE and Pex both use some of the same techniques (like DART), but SAGE is for security testing of unmanaged code (x86 binary analysis) while Pex is for unit testing of managed code (MSIL .NET binaries).

For more information on how they differ, please see http://research.microsoft.com/en-us/um/people/pg/public_psfiles/ieeesw2008.pdf

Patrice

#Jul 15th @ 9:35 AM
aL_
aL_
Rx ftw

i see, thanks Smiley

 

#Jul 16th @ 8:13 AM
cdwatkins
cdwatkins

Makes you wonder just how many advances we are going to get because of symbolic anylsis of constraints.

Microsoft Communities